{"metadata": {"vulnerability": "CVE-2026-112398", "count": 139, "kinds": {"milestone": 10, "sighting": 2, "kev": 0, "other": 127}}, "data": [{"timestamp": "2026-08-03T00:48:29.386Z", "date_only": false, "value": "2026-08-03T00:48:29.386000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-08-03T02:01:09.336Z", "date_only": false, "value": "2026-08-03T02:01:09.336839+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-08-04T15:48:18.829Z", "date_only": false, "value": "2026-08-04T15:48:18.829000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-08-04T17:01:22.074Z", "date_only": false, "value": "2026-08-04T17:01:22.074765+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-08-13T11:28:20.737Z", "date_only": false, "value": "2026-08-13T11:28:20.737000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-08-13T11:53:43.512Z", "date_only": false, "value": "2026-08-13T11:53:43.512678+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-08-13T21:58:53.092Z", "date_only": false, "value": "2026-08-13T21:58:53.092000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-08-13T22:14:53.561Z", "date_only": false, "value": "2026-08-13T22:14:53.561638+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-08-25T01:30:34.719Z", "date_only": false, "value": "2026-08-25T01:30:34.719000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-08-25T01:53:26.192Z", "date_only": false, "value": "2026-08-25T01:53:26.192779+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-09-08T12:08:37.576Z", "date_only": false, "value": "2026-09-08T12:08:37.576000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-09-08T12:33:32.310Z", "date_only": false, "value": "2026-09-08T12:33:32.310662+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-09-09T11:21:05.360Z", "date_only": false, "value": "2026-09-09T11:21:05.360000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2026-09-09T11:31:19.834Z", "date_only": false, "value": "2026-09-09T11:31:19.834714+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-09-11T15:49:30.366Z", "date_only": false, "value": "2026-09-11T15:49:30.366000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-09-11T16:01:15.919Z", "date_only": false, "value": "2026-09-11T16:01:15.919616+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-09-14T16:11:41.401Z", "date_only": false, "value": "2026-09-14T16:11:41.401000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2026-09-14T16:22:17.356Z", "date_only": false, "value": "2026-09-14T16:22:17.356407+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-09-22T14:53:20.999Z", "date_only": false, "value": "2026-09-22T14:53:20.999000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2026-09-22T20:07:47.987Z", "date_only": false, "value": "2026-09-22T20:07:47.987231+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2026-09-23T02:06:10.571Z", "date_only": false, "value": "2026-09-23T02:06:10.571000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.13.release_date"}, {"timestamp": "2026-09-23T02:30:57.997Z", "date_only": false, "value": "2026-09-23T02:30:57.997196+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.13.discovery_date"}, {"timestamp": "2026-09-29T15:30:27.136Z", "date_only": false, "value": "2026-09-29T15:30:27.136000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.19.release_date"}, {"timestamp": "2026-09-29T15:36:05.963Z", "date_only": false, "value": "2026-09-29T15:36:05.963000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.20.release_date"}, {"timestamp": "2026-09-29T15:41:38.807Z", "date_only": false, "value": "2026-09-29T15:41:38.807723+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.20.discovery_date"}, {"timestamp": "2026-09-29T15:44:25.449Z", "date_only": false, "value": "2026-09-29T15:44:25.449046+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.19.discovery_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.18.release_date"}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.14.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.18.discovery_date"}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.14.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-10-14T22:52:38.541Z", "date_only": false, "value": "2026-10-14T22:52:38.541000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.21.release_date"}, {"timestamp": "2026-10-14T22:52:40.373Z", "date_only": false, "value": "2026-10-14T22:52:40.373000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.22.release_date"}, {"timestamp": "2026-10-14T22:52:42.217Z", "date_only": false, "value": "2026-10-14T22:52:42.217000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.23.release_date"}, {"timestamp": "2026-10-14T22:52:43.585Z", "date_only": false, "value": "2026-10-14T22:52:43.585000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.24.release_date"}, {"timestamp": "2026-10-14T23:01:05.434Z", "date_only": false, "value": "2026-10-14T23:01:05.434947+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.23.discovery_date"}, {"timestamp": "2026-10-14T23:01:39.302Z", "date_only": false, "value": "2026-10-14T23:01:39.302092+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.22.discovery_date"}, {"timestamp": "2026-10-14T23:02:28.242Z", "date_only": false, "value": "2026-10-14T23:02:28.242131+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.21.discovery_date"}, {"timestamp": "2026-10-14T23:03:29.261Z", "date_only": false, "value": "2026-10-14T23:03:29.261426+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.24.discovery_date"}, {"timestamp": "2026-10-15T09:38:02.125Z", "date_only": false, "value": "2026-10-15T09:38:02.125000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-15T09:40:58.551Z", "date_only": false, "value": "2026-10-15T09:40:58.551187+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-17T20:36:23Z", "date_only": false, "value": "2026-10-17T20:36:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x8w-8jj5-q52h", "record": "CVE-2026-112398", "field": "creation_timestamp", "uuid": "33578714-bc91-484c-911f-076ee75aa8fc", "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x8w-8jj5-q52h", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-19T16:58:51.959Z", "date_only": false, "value": "2026-10-19T16:58:51.959Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-112398", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-19T20:35:39.189Z", "date_only": false, "value": "2026-10-19T20:35:39.189000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.27.release_date"}, {"timestamp": "2026-10-19T20:40:36.285Z", "date_only": false, "value": "2026-10-19T20:40:36.285000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.28.release_date"}, {"timestamp": "2026-10-19T20:46:40.784Z", "date_only": false, "value": "2026-10-19T20:46:40.784000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.30.release_date"}, {"timestamp": "2026-10-19T20:46:40.784Z", "date_only": false, "value": "2026-10-19T20:46:40.784000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:93077", "record": "RHSA-2026:93077", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-19T20:51:29.035Z", "date_only": false, "value": "2026-10-19T20:51:29.035172+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.30.discovery_date"}, {"timestamp": "2026-10-19T20:51:29.035Z", "date_only": false, "value": "2026-10-19T20:51:29.035172+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:93077", "record": "RHSA-2026:93077", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-19T20:51:58.037Z", "date_only": false, "value": "2026-10-19T20:51:58.037704+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.27.discovery_date"}, {"timestamp": "2026-10-19T20:52:51.473Z", "date_only": false, "value": "2026-10-19T20:52:51.473281+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.28.discovery_date"}, {"timestamp": "2026-10-19T21:07:25.229Z", "date_only": false, "value": "2026-10-19T21:07:25.229Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-112398", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-19T21:07:25.229Z", "date_only": false, "value": "2026-10-19T21:07:25.229000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.32.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-19T21:07:25.229Z", "date_only": false, "value": "2026-10-19T21:07:25.229000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:93077", "record": "RHSA-2026:93077", "field": "vulnerabilities.1.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-19T21:07:25.229Z", "date_only": false, "value": "2026-10-19T21:07:25.229Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-112398", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-19T21:10:11.266Z", "date_only": false, "value": "2026-10-19T21:10:11.266000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.33.release_date"}, {"timestamp": "2026-10-19T21:12:37.401Z", "date_only": false, "value": "2026-10-19T21:12:37.401000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.34.release_date"}, {"timestamp": "2026-10-19T21:17:18.908Z", "date_only": false, "value": "2026-10-19T21:17:18.908000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.29.release_date"}, {"timestamp": "2026-10-19T21:17:35.684Z", "date_only": false, "value": "2026-10-19T21:17:35.684000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.31.release_date"}, {"timestamp": "2026-10-19T21:18:57.027Z", "date_only": false, "value": "2026-10-19T21:18:57.027000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.35.release_date"}, {"timestamp": "2026-10-19T21:21:01.037Z", "date_only": false, "value": "2026-10-19T21:21:01.037991+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.35.discovery_date"}, {"timestamp": "2026-10-19T21:21:30.155Z", "date_only": false, "value": "2026-10-19T21:21:30.155551+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.33.discovery_date"}, {"timestamp": "2026-10-19T21:21:41.148Z", "date_only": false, "value": "2026-10-19T21:21:41.148327+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.34.discovery_date"}, {"timestamp": "2026-10-19T21:21:52.403Z", "date_only": false, "value": "2026-10-19T21:21:52.403747+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.29.discovery_date"}, {"timestamp": "2026-10-19T21:21:59.767Z", "date_only": false, "value": "2026-10-19T21:21:59.767228+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.32.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-19T21:21:59.767Z", "date_only": false, "value": "2026-10-19T21:21:59.767228+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:93077", "record": "RHSA-2026:93077", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-19T21:22:05.164Z", "date_only": false, "value": "2026-10-19T21:22:05.164607+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.31.discovery_date"}, {"timestamp": "2026-10-19T21:22:21.077Z", "date_only": false, "value": "2026-10-19T21:22:21.077000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.36.release_date"}, {"timestamp": "2026-10-19T21:24:08.289Z", "date_only": false, "value": "2026-10-19T21:24:08.289539Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117469678649790146", "record": "CVE-2026-112398", "field": "creation_timestamp", "uuid": "99f55c7e-9008-4c5a-a3d6-5d8bd07cdc43", "content": "CVE-2026-112398 Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines beyond the allocated tile buffer. FlashPix (FPX) JPEG decoding selects raw mode LA with two bytes per pixel, while an unrecognized JPEG mode can be decoded as JCS_UNKNOWN with four components, causing ImagingJpegDecode to write four-component scanlines into the two-byte tile buffer. An attacker can supply a crafted OLE2 FlashPix file to an application with the optional olefile dependency installed that opens or thumbnails untrusted input. This can corrupt heap memory and may allow arbitrary code execution. This issue is fixed in version 13.0.0.\nhttps://www.cve.org/CVERecord?id=CVE-2026-112398https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x8w-8jj5-q52hhttps://github.com/python-pillow/Pillow/commit/242a059aedc1935097d9aa1dc3f099750467ba75https://github.com/python-pillow/Pillow/releases/tag/13.0.0#python-pillow #Pillow#CVE_2026_112398#bot", "url": "https://infosec.exchange/users/cve/statuses/117469678649790146"}, {"timestamp": "2026-10-19T21:27:56.705Z", "date_only": false, "value": "2026-10-19T21:27:56.705000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.37.release_date"}, {"timestamp": "2026-10-19T21:29:53.515Z", "date_only": false, "value": "2026-10-19T21:29:53.515000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.38.release_date"}, {"timestamp": "2026-10-19T21:31:49.946Z", "date_only": false, "value": "2026-10-19T21:31:49.946000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.39.release_date"}, {"timestamp": "2026-10-19T21:35:25.797Z", "date_only": false, "value": "2026-10-19T21:35:25.797000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.40.release_date"}, {"timestamp": "2026-10-19T21:41:54.085Z", "date_only": false, "value": "2026-10-19T21:41:54.085786+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.36.discovery_date"}, {"timestamp": "2026-10-19T21:42:15.131Z", "date_only": false, "value": "2026-10-19T21:42:15.131597+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.38.discovery_date"}, {"timestamp": "2026-10-19T21:43:45.124Z", "date_only": false, "value": "2026-10-19T21:43:45.124371+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.37.discovery_date"}, {"timestamp": "2026-10-19T21:53:49.979Z", "date_only": false, "value": "2026-10-19T21:53:49.979000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.41.release_date"}, {"timestamp": "2026-10-19T21:55:19.424Z", "date_only": false, "value": "2026-10-19T21:55:19.424000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.42.release_date"}, {"timestamp": "2026-10-19T21:57:14.207Z", "date_only": false, "value": "2026-10-19T21:57:14.207000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.43.release_date"}, {"timestamp": "2026-10-19T21:59:17.743Z", "date_only": false, "value": "2026-10-19T21:59:17.743000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.44.release_date"}, {"timestamp": "2026-10-19T22:00:52.749Z", "date_only": false, "value": "2026-10-19T22:00:52.749000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.45.release_date"}, {"timestamp": "2026-10-19T22:01:05.404Z", "date_only": false, "value": "2026-10-19T22:01:05.404464+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.42.discovery_date"}, {"timestamp": "2026-10-19T22:01:14.071Z", "date_only": false, "value": "2026-10-19T22:01:14.071566+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.41.discovery_date"}, {"timestamp": "2026-10-19T22:01:20.951Z", "date_only": false, "value": "2026-10-19T22:01:20.951322+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.43.discovery_date"}, {"timestamp": "2026-10-19T22:07:50.418Z", "date_only": false, "value": "2026-10-19T22:07:50.418000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:93077", "record": "RHSA-2026:93077", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-19T22:17:00Z", "date_only": false, "value": "2026-10-19T22:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-112398", "record": "UBUNTU-CVE-2026-112398", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-19T22:17:07Z", "date_only": false, "value": "2026-10-19T22:17:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5X8W-8JJ5-Q52H", "record": "GHSA-5X8W-8JJ5-Q52H", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-19T22:17:07.107Z", "date_only": false, "value": "2026-10-19T22:17:07.107", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-112398", "record": "FKIE_CVE-2026-112398", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-19T22:17:07.107Z", "date_only": false, "value": "2026-10-19T22:17:07.107Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-4330", "record": "PYSEC-2026-4330", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-19T22:21:12.210Z", "date_only": false, "value": "2026-10-19T22:21:12.210877+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.45.discovery_date"}, {"timestamp": "2026-10-19T22:21:21.457Z", "date_only": false, "value": "2026-10-19T22:21:21.457146+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:93077", "record": "RHSA-2026:93077", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-19T22:21:29.226Z", "date_only": false, "value": "2026-10-19T22:21:29.226245+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.44.discovery_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.26.release_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.26.discovery_date"}, {"timestamp": "2026-10-20T16:21:58.830Z", "date_only": false, "value": "2026-10-20T16:21:58.830847+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.39.discovery_date"}, {"timestamp": "2026-10-21T20:35:06.548Z", "date_only": false, "value": "2026-10-21T20:35:06.548000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.46.release_date"}, {"timestamp": "2026-10-21T20:51:27.620Z", "date_only": false, "value": "2026-10-21T20:51:27.620111+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.46.discovery_date"}, {"timestamp": "2026-10-21T20:56:26.344Z", "date_only": false, "value": "2026-10-21T20:56:26.344000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.16.release_date"}, {"timestamp": "2026-10-21T20:58:24.238Z", "date_only": false, "value": "2026-10-21T20:58:24.238000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.17.release_date"}, {"timestamp": "2026-10-21T21:03:21.143Z", "date_only": false, "value": "2026-10-21T21:03:21.143962+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.16.discovery_date"}, {"timestamp": "2026-10-21T21:03:22.785Z", "date_only": false, "value": "2026-10-21T21:03:22.785000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.15.release_date"}, {"timestamp": "2026-10-21T21:06:07.880Z", "date_only": false, "value": "2026-10-21T21:06:07.880492+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.17.discovery_date"}, {"timestamp": "2026-10-21T21:25:20.244Z", "date_only": false, "value": "2026-10-21T21:25:20.244307+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.15.discovery_date"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12230-1", "record": "OPENSUSE-SU-2026:12230-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12230-1", "record": "OPENSUSE-SU-2026:12230-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12230-1", "record": "OPENSUSE-SU-2026:12230-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12230-1", "record": "OPENSUSE-SU-2026:12230-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-22T13:35:41.975Z", "date_only": false, "value": "2026-10-22T13:35:41.975000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.25.release_date"}, {"timestamp": "2026-10-22T13:42:58.596Z", "date_only": false, "value": "2026-10-22T13:42:58.596140+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.25.discovery_date"}, {"timestamp": "2026-10-22T21:05:55.203Z", "date_only": false, "value": "2026-10-22T21:05:55.203396Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-112398", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-22T21:05:55.203Z", "date_only": false, "value": "2026-10-22T21:05:55.203396Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-112398", "record": "FKIE_CVE-2026-112398", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-22T21:06:17.285Z", "date_only": false, "value": "2026-10-22T21:06:17.285Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-112398", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-22T21:06:17.285Z", "date_only": false, "value": "2026-10-22T21:06:17.285Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-112398", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-22T21:32:36.389Z", "date_only": false, "value": "2026-10-22T21:32:36.389983+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.40.discovery_date"}, {"timestamp": "2026-10-23T09:44:50Z", "date_only": false, "value": "2026-10-23T09:44:50Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12230-1", "record": "OPENSUSE-SU-2026:12230-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-23T09:44:50Z", "date_only": false, "value": "2026-10-23T09:44:50Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12230-1", "record": "OPENSUSE-SU-2026:12230-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-23T21:55:21Z", "date_only": false, "value": "2026-10-23T21:55:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5X8W-8JJ5-Q52H", "record": "GHSA-5X8W-8JJ5-Q52H", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T21:55:21Z", "date_only": false, "value": "2026-10-23T21:55:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5X8W-8JJ5-Q52H", "record": "GHSA-5X8W-8JJ5-Q52H", "field": "modified"}, {"timestamp": "2026-10-26T05:55:40.925Z", "date_only": false, "value": "2026-10-26T05:55:40.925Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-PILLOW-2026-112398", "record": "BIT-PILLOW-2026-112398", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T00:00:00Z", "date_only": false, "value": "2026-10-27T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.25.threats.0.date"}, {"timestamp": "2026-10-27T21:01:25.823Z", "date_only": false, "value": "2026-10-27T21:01:25.823", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-112398", "record": "FKIE_CVE-2026-112398", "field": "lastModified"}, {"timestamp": "2026-10-28T10:34:03.835Z", "date_only": false, "value": "2026-10-28T10:34:03.835021Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-4330", "record": "PYSEC-2026-4330", "field": "modified"}, {"timestamp": "2026-10-28T17:50:36Z", "date_only": false, "value": "2026-10-28T17:50:36Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-112398", "record": "UBUNTU-CVE-2026-112398", "field": "modified"}, {"timestamp": "2026-10-29T09:16:42.832Z", "date_only": false, "value": "2026-10-29T09:16:42.832Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-PILLOW-2026-112398", "record": "BIT-PILLOW-2026-112398", "field": "modified"}, {"timestamp": "2026-10-29T21:37:34Z", "date_only": false, "value": "2026-10-29T21:37:34+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-29T21:37:34Z", "date_only": false, "value": "2026-10-29T21:37:34+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-29T21:37:34Z", "date_only": false, "value": "2026-10-29T21:37:34+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.32.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-30T19:24:14Z", "date_only": false, "value": "2026-10-30T19:24:14+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:93077", "record": "RHSA-2026:93077", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-30T19:24:14Z", "date_only": false, "value": "2026-10-30T19:24:14+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:93077", "record": "RHSA-2026:93077", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-30T19:24:14Z", "date_only": false, "value": "2026-10-30T19:24:14+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:93077", "record": "RHSA-2026:93077", "field": "vulnerabilities.1.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-30T23:04:54Z", "date_only": false, "value": "2026-10-30T23:04:54+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:93077", "record": "RHSA-2026:93077", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-30T23:04:54Z", "date_only": false, "value": "2026-10-30T23:04:54+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:93077", "record": "RHSA-2026:93077", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-30T23:04:54Z", "date_only": false, "value": "2026-10-30T23:04:54+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:93077", "record": "RHSA-2026:93077", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-31T05:56:31Z", "date_only": false, "value": "2026-10-31T05:56:31+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-31T05:56:31Z", "date_only": false, "value": "2026-10-31T05:56:31+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-31T05:56:31Z", "date_only": false, "value": "2026-10-31T05:56:31+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "document.tracking.current_release_date"}], "metrics": {"as_of": "2026-10-31T06:47:16.319Z", "anchors": {"origin": {"timestamp": "2026-10-19T21:21:59.767Z", "date_only": false, "value": "2026-10-19T21:21:59.767228+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.32.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "discovery": {"timestamp": "2026-10-19T21:21:59.767Z", "date_only": false, "value": "2026-10-19T21:21:59.767228+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.32.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-19T21:07:25.229Z", "date_only": false, "value": "2026-10-19T21:07:25.229000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.32.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-10-17T20:36:23Z", "date_only": false, "value": "2026-10-17T20:36:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x8w-8jj5-q52h", "record": "CVE-2026-112398", "field": "creation_timestamp", "uuid": "33578714-bc91-484c-911f-076ee75aa8fc", "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x8w-8jj5-q52h", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": {"timestamp": "2026-10-29T21:37:34Z", "date_only": false, "value": "2026-10-29T21:37:34+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.32.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": -174662.229, "hours": -48.51728583333333, "days": -2.021553576388889, "min_seconds": -174662.229, "max_seconds": -174662.229, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2026-10-19T21:07:25.229Z", "date_only": false, "value": "2026-10-19T21:07:25.229000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.32.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-17T20:36:23Z", "date_only": false, "value": "2026-10-17T20:36:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x8w-8jj5-q52h", "record": "CVE-2026-112398", "field": "creation_timestamp", "uuid": "33578714-bc91-484c-911f-076ee75aa8fc", "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x8w-8jj5-q52h", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 864934.233, "hours": 240.25950916666667, "days": 10.010812881944444, "min_seconds": 864934.233, "max_seconds": 864934.233, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-19T21:21:59.767Z", "date_only": false, "value": "2026-10-19T21:21:59.767228+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.32.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T21:37:34Z", "date_only": false, "value": "2026-10-29T21:37:34+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.32.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "disclosure_to_patch": {"available": true, "seconds": 865808.771, "hours": 240.50243638888887, "days": 10.020934849537037, "min_seconds": 865808.771, "max_seconds": 865808.771, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-19T21:07:25.229Z", "date_only": false, "value": "2026-10-19T21:07:25.229000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.32.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T21:37:34Z", "date_only": false, "value": "2026-10-29T21:37:34+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.32.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 864934.233, "hours": 240.25950916666667, "days": 10.010812881944444, "min_seconds": 864934.233, "max_seconds": 864934.233, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-19T21:21:59.767Z", "date_only": false, "value": "2026-10-19T21:21:59.767228+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.32.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T21:37:34Z", "date_only": false, "value": "2026-10-29T21:37:34+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.32.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 1040471.0, "hours": 289.01972222222224, "days": 12.042488425925926, "min_seconds": 1040471.0, "max_seconds": 1040471.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-17T20:36:23Z", "date_only": false, "value": "2026-10-17T20:36:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x8w-8jj5-q52h", "record": "CVE-2026-112398", "field": "creation_timestamp", "uuid": "33578714-bc91-484c-911f-076ee75aa8fc", "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x8w-8jj5-q52h", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-29T21:37:34Z", "date_only": false, "value": "2026-10-29T21:37:34+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.32.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}}}