{"metadata": {"vulnerability": "CVE-2026-112403", "count": 129, "kinds": {"milestone": 11, "sighting": 4, "kev": 0, "other": 114}}, "data": [{"timestamp": "2026-08-03T00:48:29.386Z", "date_only": false, "value": "2026-08-03T00:48:29.386000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.4.release_date", "linked_record": true}, {"timestamp": "2026-08-03T02:01:09.336Z", "date_only": false, "value": "2026-08-03T02:01:09.336839+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.4.discovery_date", "linked_record": true}, {"timestamp": "2026-08-04T15:48:18.829Z", "date_only": false, "value": "2026-08-04T15:48:18.829000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2026-08-04T17:01:22.074Z", "date_only": false, "value": "2026-08-04T17:01:22.074765+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2026-08-13T11:28:20.737Z", "date_only": false, "value": "2026-08-13T11:28:20.737000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.6.release_date", "linked_record": true}, {"timestamp": "2026-08-13T11:53:43.512Z", "date_only": false, "value": "2026-08-13T11:53:43.512678+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.6.discovery_date", "linked_record": true}, {"timestamp": "2026-08-13T21:58:53.092Z", "date_only": false, "value": "2026-08-13T21:58:53.092000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.3.release_date", "linked_record": true}, {"timestamp": "2026-08-13T22:14:53.561Z", "date_only": false, "value": "2026-08-13T22:14:53.561638+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.3.discovery_date", "linked_record": true}, {"timestamp": "2026-08-25T01:30:34.719Z", "date_only": false, "value": "2026-08-25T01:30:34.719000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.9.release_date", "linked_record": true}, {"timestamp": "2026-08-25T01:53:26.192Z", "date_only": false, "value": "2026-08-25T01:53:26.192779+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.9.discovery_date", "linked_record": true}, {"timestamp": "2026-09-08T12:08:37.576Z", "date_only": false, "value": "2026-09-08T12:08:37.576000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2026-09-08T12:33:32.310Z", "date_only": false, "value": "2026-09-08T12:33:32.310662+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.2.discovery_date", "linked_record": true}, {"timestamp": "2026-09-09T11:21:05.360Z", "date_only": false, "value": "2026-09-09T11:21:05.360000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.11.release_date", "linked_record": true}, {"timestamp": "2026-09-09T11:31:19.834Z", "date_only": false, "value": "2026-09-09T11:31:19.834714+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.11.discovery_date", "linked_record": true}, {"timestamp": "2026-09-11T15:49:30.366Z", "date_only": false, "value": "2026-09-11T15:49:30.366000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.5.release_date", "linked_record": true}, {"timestamp": "2026-09-11T16:01:15.919Z", "date_only": false, "value": "2026-09-11T16:01:15.919616+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.5.discovery_date", "linked_record": true}, {"timestamp": "2026-09-14T16:11:41.401Z", "date_only": false, "value": "2026-09-14T16:11:41.401000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.10.release_date", "linked_record": true}, {"timestamp": "2026-09-14T16:22:17.356Z", "date_only": false, "value": "2026-09-14T16:22:17.356407+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.10.discovery_date", "linked_record": true}, {"timestamp": "2026-09-22T14:53:20.999Z", "date_only": false, "value": "2026-09-22T14:53:20.999000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.12.release_date", "linked_record": true}, {"timestamp": "2026-09-22T20:07:47.987Z", "date_only": false, "value": "2026-09-22T20:07:47.987231+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.12.discovery_date", "linked_record": true}, {"timestamp": "2026-09-23T02:06:10.571Z", "date_only": false, "value": "2026-09-23T02:06:10.571000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.13.release_date", "linked_record": true}, {"timestamp": "2026-09-23T02:30:57.997Z", "date_only": false, "value": "2026-09-23T02:30:57.997196+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.13.discovery_date", "linked_record": true}, {"timestamp": "2026-09-29T15:30:27.136Z", "date_only": false, "value": "2026-09-29T15:30:27.136000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.19.release_date", "linked_record": true}, {"timestamp": "2026-09-29T15:36:05.963Z", "date_only": false, "value": "2026-09-29T15:36:05.963000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.20.release_date", "linked_record": true}, {"timestamp": "2026-09-29T15:41:38.807Z", "date_only": false, "value": "2026-09-29T15:41:38.807723+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.20.discovery_date", "linked_record": true}, {"timestamp": "2026-09-29T15:44:25.449Z", "date_only": false, "value": "2026-09-29T15:44:25.449046+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.19.discovery_date", "linked_record": true}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.18.release_date", "linked_record": true}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.14.release_date", "linked_record": true}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.7.release_date", "linked_record": true}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.8.release_date", "linked_record": true}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.7.discovery_date", "linked_record": true}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.18.discovery_date", "linked_record": true}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.14.discovery_date", "linked_record": true}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.8.discovery_date", "linked_record": true}, {"timestamp": "2026-10-14T22:52:38.541Z", "date_only": false, "value": "2026-10-14T22:52:38.541000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.21.release_date", "linked_record": true}, {"timestamp": "2026-10-14T22:52:40.373Z", "date_only": false, "value": "2026-10-14T22:52:40.373000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.22.release_date", "linked_record": true}, {"timestamp": "2026-10-14T22:52:42.217Z", "date_only": false, "value": "2026-10-14T22:52:42.217000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.23.release_date", "linked_record": true}, {"timestamp": "2026-10-14T22:52:43.585Z", "date_only": false, "value": "2026-10-14T22:52:43.585000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.24.release_date", "linked_record": true}, {"timestamp": "2026-10-14T23:01:05.434Z", "date_only": false, "value": "2026-10-14T23:01:05.434947+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.23.discovery_date", "linked_record": true}, {"timestamp": "2026-10-14T23:01:39.302Z", "date_only": false, "value": "2026-10-14T23:01:39.302092+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.22.discovery_date", "linked_record": true}, {"timestamp": "2026-10-14T23:02:28.242Z", "date_only": false, "value": "2026-10-14T23:02:28.242131+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.21.discovery_date", "linked_record": true}, {"timestamp": "2026-10-14T23:03:29.261Z", "date_only": false, "value": "2026-10-14T23:03:29.261426+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.24.discovery_date", "linked_record": true}, {"timestamp": "2026-10-15T09:38:02.125Z", "date_only": false, "value": "2026-10-15T09:38:02.125000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2026-10-15T09:40:58.551Z", "date_only": false, "value": "2026-10-15T09:40:58.551187+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2026-10-19T16:58:51.959Z", "date_only": false, "value": "2026-10-19T16:58:51.959Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-112403", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-19T20:35:39.189Z", "date_only": false, "value": "2026-10-19T20:35:39.189000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.27.release_date", "linked_record": true}, {"timestamp": "2026-10-19T20:40:36.285Z", "date_only": false, "value": "2026-10-19T20:40:36.285000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.28.release_date", "linked_record": true}, {"timestamp": "2026-10-19T20:46:40.784Z", "date_only": false, "value": "2026-10-19T20:46:40.784000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.30.release_date", "linked_record": true}, {"timestamp": "2026-10-19T20:51:29.035Z", "date_only": false, "value": "2026-10-19T20:51:29.035172+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.30.discovery_date", "linked_record": true}, {"timestamp": "2026-10-19T20:51:58.037Z", "date_only": false, "value": "2026-10-19T20:51:58.037704+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.27.discovery_date", "linked_record": true}, {"timestamp": "2026-10-19T20:52:51.473Z", "date_only": false, "value": "2026-10-19T20:52:51.473281+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.28.discovery_date", "linked_record": true}, {"timestamp": "2026-10-19T21:07:25.229Z", "date_only": false, "value": "2026-10-19T21:07:25.229000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.32.release_date", "linked_record": true}, {"timestamp": "2026-10-19T21:10:11.266Z", "date_only": false, "value": "2026-10-19T21:10:11.266000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.33.release_date", "linked_record": true}, {"timestamp": "2026-10-19T21:12:37.401Z", "date_only": false, "value": "2026-10-19T21:12:37.401000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.34.release_date", "linked_record": true}, {"timestamp": "2026-10-19T21:17:18.908Z", "date_only": false, "value": "2026-10-19T21:17:18.908000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.29.release_date", "linked_record": true}, {"timestamp": "2026-10-19T21:17:35.684Z", "date_only": false, "value": "2026-10-19T21:17:35.684000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.31.release_date", "linked_record": true}, {"timestamp": "2026-10-19T21:18:57.027Z", "date_only": false, "value": "2026-10-19T21:18:57.027000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.35.release_date", "linked_record": true}, {"timestamp": "2026-10-19T21:21:01.037Z", "date_only": false, "value": "2026-10-19T21:21:01.037991+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.35.discovery_date", "linked_record": true}, {"timestamp": "2026-10-19T21:21:30.155Z", "date_only": false, "value": "2026-10-19T21:21:30.155551+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.33.discovery_date", "linked_record": true}, {"timestamp": "2026-10-19T21:21:41.148Z", "date_only": false, "value": "2026-10-19T21:21:41.148327+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.34.discovery_date", "linked_record": true}, {"timestamp": "2026-10-19T21:21:52.403Z", "date_only": false, "value": "2026-10-19T21:21:52.403747+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.29.discovery_date", "linked_record": true}, {"timestamp": "2026-10-19T21:21:59.767Z", "date_only": false, "value": "2026-10-19T21:21:59.767228+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.32.discovery_date", "linked_record": true}, {"timestamp": "2026-10-19T21:22:05.164Z", "date_only": false, "value": "2026-10-19T21:22:05.164607+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.31.discovery_date", "linked_record": true}, {"timestamp": "2026-10-19T21:22:21.077Z", "date_only": false, "value": "2026-10-19T21:22:21.077Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-112403", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-19T21:22:21.077Z", "date_only": false, "value": "2026-10-19T21:22:21.077000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.36.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-19T21:22:21.077Z", "date_only": false, "value": "2026-10-19T21:22:21.077Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-112403", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-19T21:27:56.705Z", "date_only": false, "value": "2026-10-19T21:27:56.705000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.37.release_date", "linked_record": true}, {"timestamp": "2026-10-19T21:29:53.515Z", "date_only": false, "value": "2026-10-19T21:29:53.515000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.38.release_date", "linked_record": true}, {"timestamp": "2026-10-19T21:31:49.946Z", "date_only": false, "value": "2026-10-19T21:31:49.946000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.39.release_date", "linked_record": true}, {"timestamp": "2026-10-19T21:35:25.797Z", "date_only": false, "value": "2026-10-19T21:35:25.797000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.40.release_date", "linked_record": true}, {"timestamp": "2026-10-19T21:36:39.289Z", "date_only": false, "value": "2026-10-19T21:36:39.289568Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117469727870683265", "record": "CVE-2026-112403", "field": "creation_timestamp", "uuid": "b5e11e2a-652d-4f88-a1b1-ec7cd97a8f86", "content": "CVE-2026-112403 Pillow: Heap buffer overflow in ImagingJpegDecode Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit lossless SOF3 JPEG decoded by a build linked to libjpeg-turbo 3.x can ignore the requested downscaling geometry. An attacker can supply such a JPEG to an application that uses draft() or thumbnail() to request downscaling. This can corrupt heap memory, crash the process, or potentially allow code execution. Older libjpeg-turbo 2.x and IJG builds reject the SOF3 input. This issue is fixed in version 13.0.0.\nhttps://www.cve.org/CVERecord?id=CVE-2026-112403https://github.com/python-pillow/Pillow/security/advisories/GHSA-8g5g-8vmr-9782https://github.com/python-pillow/Pillow/commit/242a059aedc1935097d9aa1dc3f099750467ba75https://github.com/python-pillow/Pillow/releases/tag/13.0.0#python-pillow #Pillow#CVE_2026_112403#bot", "url": "https://infosec.exchange/users/cve/statuses/117469727870683265"}, {"timestamp": "2026-10-19T21:41:54.085Z", "date_only": false, "value": "2026-10-19T21:41:54.085786+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.36.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-19T21:42:15.131Z", "date_only": false, "value": "2026-10-19T21:42:15.131597+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.38.discovery_date", "linked_record": true}, {"timestamp": "2026-10-19T21:43:45.124Z", "date_only": false, "value": "2026-10-19T21:43:45.124371+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.37.discovery_date", "linked_record": true}, {"timestamp": "2026-10-19T21:53:49.979Z", "date_only": false, "value": "2026-10-19T21:53:49.979000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.41.release_date", "linked_record": true}, {"timestamp": "2026-10-19T21:55:19.424Z", "date_only": false, "value": "2026-10-19T21:55:19.424000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.42.release_date", "linked_record": true}, {"timestamp": "2026-10-19T21:57:14.207Z", "date_only": false, "value": "2026-10-19T21:57:14.207000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.43.release_date", "linked_record": true}, {"timestamp": "2026-10-19T21:59:17.743Z", "date_only": false, "value": "2026-10-19T21:59:17.743000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.44.release_date", "linked_record": true}, {"timestamp": "2026-10-19T22:00:52.749Z", "date_only": false, "value": "2026-10-19T22:00:52.749000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.45.release_date", "linked_record": true}, {"timestamp": "2026-10-19T22:01:05.404Z", "date_only": false, "value": "2026-10-19T22:01:05.404464+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.42.discovery_date", "linked_record": true}, {"timestamp": "2026-10-19T22:01:14.071Z", "date_only": false, "value": "2026-10-19T22:01:14.071566+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.41.discovery_date", "linked_record": true}, {"timestamp": "2026-10-19T22:01:20.951Z", "date_only": false, "value": "2026-10-19T22:01:20.951322+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.43.discovery_date", "linked_record": true}, {"timestamp": "2026-10-19T22:17:00Z", "date_only": false, "value": "2026-10-19T22:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-112403", "record": "UBUNTU-CVE-2026-112403", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-19T22:17:07Z", "date_only": false, "value": "2026-10-19T22:17:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8G5G-8VMR-9782", "record": "GHSA-8G5G-8VMR-9782", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-19T22:17:07.770Z", "date_only": false, "value": "2026-10-19T22:17:07.770", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-112403", "record": "FKIE_CVE-2026-112403", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-19T22:17:07.770Z", "date_only": false, "value": "2026-10-19T22:17:07.770Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-4332", "record": "PYSEC-2026-4332", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-19T22:21:12.210Z", "date_only": false, "value": "2026-10-19T22:21:12.210877+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.45.discovery_date", "linked_record": true}, {"timestamp": "2026-10-19T22:21:29.226Z", "date_only": false, "value": "2026-10-19T22:21:29.226245+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.44.discovery_date", "linked_record": true}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.26.release_date", "linked_record": true}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.26.discovery_date", "linked_record": true}, {"timestamp": "2026-10-20T16:21:58.830Z", "date_only": false, "value": "2026-10-20T16:21:58.830847+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.39.discovery_date", "linked_record": true}, {"timestamp": "2026-10-20T20:40:07Z", "date_only": false, "value": "2026-10-20T20:40:07Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8G5G-8VMR-9782", "record": "GHSA-8G5G-8VMR-9782", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-20T20:40:07Z", "date_only": false, "value": "2026-10-20T20:40:07Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8G5G-8VMR-9782", "record": "GHSA-8G5G-8VMR-9782", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-20T21:15:02.576Z", "date_only": false, "value": "2026-10-20T21:15:02.576183Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/117475305074095339", "record": "cve-2026-112403", "field": "creation_timestamp", "uuid": "b1fff68a-43ce-42b8-9543-f1a6f1db94aa", "content": "Any time you can hack via memes is funny to me.\nhttps://nvd.nist.gov/vuln/detail/cve-2026-112403\n\nPillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit lossless SOF3 JPEG decoded by a build linked to libjpeg-turbo 3.x can ignore the requested downscaling geometry. An attacker can supply such a JPEG to an application that uses draft() or thumbnail() to request downscaling. This can corrupt heap memory, crash the process, or potentially allow code execution. Older libjpeg-turbo 2.x and IJG builds reject the SOF3 input. This issue is fixed in version 13.0.0.", "url": "https://infosec.exchange/users/cR0w/statuses/117475305074095339"}, {"timestamp": "2026-10-21T09:14:41Z", "date_only": false, "value": "2026-10-21T09:14:41Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-AIDER-CVE-2026-112403", "record": "BREW-AIDER-CVE-2026-112403", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-21T20:35:06.548Z", "date_only": false, "value": "2026-10-21T20:35:06.548000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.46.release_date", "linked_record": true}, {"timestamp": "2026-10-21T20:51:27.620Z", "date_only": false, "value": "2026-10-21T20:51:27.620111+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.46.discovery_date", "linked_record": true}, {"timestamp": "2026-10-21T20:56:26.344Z", "date_only": false, "value": "2026-10-21T20:56:26.344000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.16.release_date", "linked_record": true}, {"timestamp": "2026-10-21T20:58:24.238Z", "date_only": false, "value": "2026-10-21T20:58:24.238000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.17.release_date", "linked_record": true}, {"timestamp": "2026-10-21T21:03:21.143Z", "date_only": false, "value": "2026-10-21T21:03:21.143962+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.16.discovery_date", "linked_record": true}, {"timestamp": "2026-10-21T21:03:22.785Z", "date_only": false, "value": "2026-10-21T21:03:22.785000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.15.release_date", "linked_record": true}, {"timestamp": "2026-10-21T21:06:07.880Z", "date_only": false, "value": "2026-10-21T21:06:07.880492+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.17.discovery_date", "linked_record": true}, {"timestamp": "2026-10-21T21:25:20.244Z", "date_only": false, "value": "2026-10-21T21:25:20.244307+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.15.discovery_date", "linked_record": true}, {"timestamp": "2026-10-22T13:35:41.975Z", "date_only": false, "value": "2026-10-22T13:35:41.975000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.25.release_date", "linked_record": true}, {"timestamp": "2026-10-22T13:42:58.596Z", "date_only": false, "value": "2026-10-22T13:42:58.596140+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.25.discovery_date", "linked_record": true}, {"timestamp": "2026-10-22T21:08:31.338Z", "date_only": false, "value": "2026-10-22T21:08:31.338410Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-112403", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-22T21:08:31.338Z", "date_only": false, "value": "2026-10-22T21:08:31.338410Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-112403", "record": "FKIE_CVE-2026-112403", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-10-22T21:08:58.141Z", "date_only": false, "value": "2026-10-22T21:08:58.141Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-112403", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-22T21:08:58.141Z", "date_only": false, "value": "2026-10-22T21:08:58.141Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-112403", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-22T21:32:36.389Z", "date_only": false, "value": "2026-10-22T21:32:36.389983+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.40.discovery_date", "linked_record": true}, {"timestamp": "2026-10-24T20:00:10Z", "date_only": false, "value": "2026-10-24T20:00:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/107073", "record": "CVE-2026-112403", "field": "creation_timestamp", "uuid": "f2b303d0-e043-4999-b20c-55841d5da8c9", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-112403\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a al4n4n\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-24 19:51:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-112403: Pillow heap buffer overflow in ImagingJpegDecode via lossless JPEG thumbnail. One POST, 100% crash rate.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/107073", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-24T20:00:10Z", "date_only": false, "value": "2026-10-24T20:00:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/107073", "record": "CVE-2026-112403", "field": "creation_timestamp", "uuid": "69cba1e5-9dac-49a8-b197-8e6fec627d94", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-112403\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a al4n4n\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-24 19:51:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-112403: Pillow heap buffer overflow in ImagingJpegDecode via lossless JPEG thumbnail. One POST, 100% crash rate.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/107073"}, {"timestamp": "2026-10-26T05:55:46.895Z", "date_only": false, "value": "2026-10-26T05:55:46.895Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-PILLOW-2026-112403", "record": "BIT-PILLOW-2026-112403", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-27T00:00:00Z", "date_only": false, "value": "2026-10-27T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.25.threats.0.date", "linked_record": true}, {"timestamp": "2026-10-27T15:00:15.043Z", "date_only": false, "value": "2026-10-27T15:00:15.043", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-112403", "record": "FKIE_CVE-2026-112403", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-28T10:34:04.044Z", "date_only": false, "value": "2026-10-28T10:34:04.044275Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-4332", "record": "PYSEC-2026-4332", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-28T17:50:36Z", "date_only": false, "value": "2026-10-28T17:50:36Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-112403", "record": "UBUNTU-CVE-2026-112403", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-29T09:16:42.832Z", "date_only": false, "value": "2026-10-29T09:16:42.832Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-PILLOW-2026-112403", "record": "BIT-PILLOW-2026-112403", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-29T21:37:34Z", "date_only": false, "value": "2026-10-29T21:37:34+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-29T21:37:34Z", "date_only": false, "value": "2026-10-29T21:37:34+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-29T21:37:34Z", "date_only": false, "value": "2026-10-29T21:37:34+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.36.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-29T21:58:11Z", "date_only": false, "value": "2026-10-29T21:58:11Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-AIDER-CVE-2026-112403", "record": "BREW-AIDER-CVE-2026-112403", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-30T09:04:55Z", "date_only": false, "value": "2026-10-30T09:04:55Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-RD66032", "record": "CLEANSTART-2026-RD66032", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T00:43:47.765Z", "date_only": false, "value": "2026-10-31T00:43:47.765894Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-RD66032", "record": "CLEANSTART-2026-RD66032", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-02T06:42:28Z", "date_only": false, "value": "2026-11-02T06:42:28Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-AD83321", "record": "CLEANSTART-2026-AD83321", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-03T00:40:40.546Z", "date_only": false, "value": "2026-11-03T00:40:40.546435Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-AD83321", "record": "CLEANSTART-2026-AD83321", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-03T21:11:47Z", "date_only": false, "value": "2026-11-03T21:11:47+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-03T21:11:47Z", "date_only": false, "value": "2026-11-03T21:11:47+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-03T21:11:47Z", "date_only": false, "value": "2026-11-03T21:11:47+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "document.tracking.current_release_date", "linked_record": true}], "metrics": {"as_of": "2026-11-03T22:43:41.375Z", "anchors": {"origin": {"timestamp": "2026-10-19T21:22:21.077Z", "date_only": false, "value": "2026-10-19T21:22:21.077000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.36.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": {"timestamp": "2026-10-19T21:41:54.085Z", "date_only": false, "value": "2026-10-19T21:41:54.085786+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.36.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-19T21:22:21.077Z", "date_only": false, "value": "2026-10-19T21:22:21.077000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.36.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2026-10-24T20:00:10Z", "date_only": false, "value": "2026-10-24T20:00:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/107073", "record": "CVE-2026-112403", "field": "creation_timestamp", "uuid": "f2b303d0-e043-4999-b20c-55841d5da8c9", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-112403\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a al4n4n\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-24 19:51:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-112403: Pillow heap buffer overflow in ImagingJpegDecode via lossless JPEG thumbnail. One POST, 100% crash rate.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/107073", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": {"timestamp": "2026-10-29T21:37:34Z", "date_only": false, "value": "2026-10-29T21:37:34+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.36.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 427068.923, "hours": 118.6302563888889, "days": 4.942927349537037, "min_seconds": 427068.923, "max_seconds": 427068.923, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-19T21:22:21.077Z", "date_only": false, "value": "2026-10-19T21:22:21.077000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.36.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-10-24T20:00:10Z", "date_only": false, "value": "2026-10-24T20:00:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/107073", "record": "CVE-2026-112403", "field": "creation_timestamp", "uuid": "f2b303d0-e043-4999-b20c-55841d5da8c9", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-112403\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a al4n4n\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-24 19:51:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-112403: Pillow heap buffer overflow in ImagingJpegDecode via lossless JPEG thumbnail. One POST, 100% crash rate.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/107073", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 863739.915, "hours": 239.9277541666667, "days": 9.996989756944444, "min_seconds": 863739.915, "max_seconds": 863739.915, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-19T21:41:54.085Z", "date_only": false, "value": "2026-10-19T21:41:54.085786+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.36.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-10-29T21:37:34Z", "date_only": false, "value": "2026-10-29T21:37:34+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.36.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, "discovery_after_disclosure": true}, "disclosure_to_patch": {"available": true, "seconds": 864912.923, "hours": 240.25358972222222, "days": 10.010566238425925, "min_seconds": 864912.923, "max_seconds": 864912.923, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-19T21:22:21.077Z", "date_only": false, "value": "2026-10-19T21:22:21.077000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.36.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-10-29T21:37:34Z", "date_only": false, "value": "2026-10-29T21:37:34+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.36.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 864912.923, "hours": 240.25358972222222, "days": 10.010566238425925, "min_seconds": 864912.923, "max_seconds": 864912.923, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-19T21:22:21.077Z", "date_only": false, "value": "2026-10-19T21:22:21.077000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.36.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-10-29T21:37:34Z", "date_only": false, "value": "2026-10-29T21:37:34+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.36.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 437844.0, "hours": 121.62333333333333, "days": 5.067638888888889, "min_seconds": 437844.0, "max_seconds": 437844.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-24T20:00:10Z", "date_only": false, "value": "2026-10-24T20:00:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/107073", "record": "CVE-2026-112403", "field": "creation_timestamp", "uuid": "f2b303d0-e043-4999-b20c-55841d5da8c9", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-112403\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a al4n4n\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-24 19:51:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-112403: Pillow heap buffer overflow in ImagingJpegDecode via lossless JPEG thumbnail. One POST, 100% crash rate.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/107073", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-29T21:37:34Z", "date_only": false, "value": "2026-10-29T21:37:34+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:92861", "record": "RHSA-2026:92861", "field": "vulnerabilities.36.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}}}