{"metadata": {"vulnerability": "CVE-2026-114583", "count": 36, "kinds": {"milestone": 12, "sighting": 1, "kev": 0, "other": 23}}, "data": [{"timestamp": "2026-10-21T18:58:26.985Z", "date_only": false, "value": "2026-10-21T18:58:26.985Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-114583", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": true, "value": "2026-10-22", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1379", "record": "CERTFR-2026-AVI-1379", "field": "vendor_advisories.1.published_at", "linked_record": true}, {"timestamp": "2026-10-22T20:57:36.019Z", "date_only": false, "value": "2026-10-22T20:57:36.019Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-114583", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-22T21:10:10.543Z", "date_only": false, "value": "2026-10-22T21:10:10.543582Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117486610667027156", "record": "CVE-2026-114583", "field": "creation_timestamp", "uuid": "6df66f15-d8b8-4838-9151-906c13b116c1", "content": "CVE-2026-114583 tar filter allows writing outside destination via empty-named symlink tarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall() with filter=\"tar\" to write files outside the destination directory, subject to the permissions of the extracting process.\nThis is the tarfile.tar_filter counterpart of CVE-2026-7774, which covered tarfile.data_filter.\nhttps://www.cve.org/CVERecord?id=CVE-2026-114583https://github.com/python/cpython/pull/160098https://github.com/python/cpython/issues/160097https://mail.python.org/archives/list/security-announce@python.org/thread/43JOWPRAV5DI3VZ4FUEUAZOHCATXXOCK/#PythonSoftwareFoundation #CPython#CVE_2026_114583#bot", "url": "https://infosec.exchange/users/cve/statuses/117486610667027156"}, {"timestamp": "2026-10-22T21:17:00Z", "date_only": false, "value": "2026-10-22T21:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-114583", "record": "UBUNTU-CVE-2026-114583", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-22T21:17:16Z", "date_only": false, "value": "2026-10-22T21:17:16Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MW29-5QXH-RR87", "record": "GHSA-MW29-5QXH-RR87", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-22T21:17:16.543Z", "date_only": false, "value": "2026-10-22T21:17:16.543", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-114583", "record": "FKIE_CVE-2026-114583", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-22T21:32:50Z", "date_only": false, "value": "2026-10-22T21:32:50Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MW29-5QXH-RR87", "record": "GHSA-MW29-5QXH-RR87", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-24T00:00:00Z", "date_only": true, "value": "2026-10-24", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1379", "record": "CERTFR-2026-AVI-1379", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-10-24T01:01:36Z", "date_only": false, "value": "2026-10-24T01:01:36.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-114583", "record": "MSRC_CVE-2026-114583", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-24T01:01:36Z", "date_only": false, "value": "2026-10-24T01:01:36.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-114583", "record": "MSRC_CVE-2026-114583", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-24T01:01:36Z", "date_only": false, "value": "2026-10-24T01:01:36.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-114583", "record": "MSRC_CVE-2026-114583", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-25T01:02:11Z", "date_only": false, "value": "2026-10-25T01:02:11.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-114583", "record": "MSRC_CVE-2026-114583", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1379", "record": "CERTFR-2026-AVI-1379", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1379", "record": "CERTFR-2026-AVI-1379", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1379", "record": "CERTFR-2026-AVI-1379", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-10-26T01:48:59Z", "date_only": false, "value": "2026-10-26T01:48:59.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-114583", "record": "MSRC_CVE-2026-114583", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-10-26T03:30:23Z", "date_only": false, "value": "2026-10-26T03:30:23Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MW29-5QXH-RR87", "record": "GHSA-MW29-5QXH-RR87", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-27T00:36:15.766Z", "date_only": false, "value": "2026-10-27T00:36:15.766Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / PSF", "record": "CVE-2026-114583", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-28T01:48:59Z", "date_only": false, "value": "2026-10-28T01:48:59.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-114583", "record": "MSRC_CVE-2026-114583", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-10-28T04:33:47.802Z", "date_only": false, "value": "2026-10-28T04:33:47.802941Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-114583", "record": "BELL-CVE-2026-114583", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T14:44:50Z", "date_only": false, "value": "2026-10-28T14:44:50.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-114583", "record": "MSRC_CVE-2026-114583", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2026-10-28T17:50:37Z", "date_only": false, "value": "2026-10-28T17:50:37Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-114583", "record": "UBUNTU-CVE-2026-114583", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-29T12:12:45.267Z", "date_only": false, "value": "2026-10-29T12:12:45.267Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-LIBPYTHON-2026-114583", "record": "BIT-LIBPYTHON-2026-114583", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-29T12:19:39.543Z", "date_only": false, "value": "2026-10-29T12:19:39.543Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-PYTHON-2026-114583", "record": "BIT-PYTHON-2026-114583", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T01:45:06Z", "date_only": false, "value": "2026-10-30T01:45:06.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-114583", "record": "MSRC_CVE-2026-114583", "field": "document.tracking.revision_history.5.date", "linked_record": true}, {"timestamp": "2026-10-30T01:45:06Z", "date_only": false, "value": "2026-10-30T01:45:06.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-114583", "record": "MSRC_CVE-2026-114583", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-30T07:01:21.930Z", "date_only": false, "value": "2026-10-30T07:01:21.930Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-114583", "record": "MSRC_CVE-2026-114583", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-10-30T15:59:08.834Z", "date_only": false, "value": "2026-10-30T15:59:08.834Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-LIBPYTHON-2026-114583", "record": "BIT-LIBPYTHON-2026-114583", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-30T15:59:08.834Z", "date_only": false, "value": "2026-10-30T15:59:08.834Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-PYTHON-2026-114583", "record": "BIT-PYTHON-2026-114583", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T06:03:54.467Z", "date_only": false, "value": "2026-10-31T06:03:54.467806Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-114583", "record": "BELL-CVE-2026-114583", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-02T12:31:38.077Z", "date_only": false, "value": "2026-11-02T12:31:38.077183Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-114583", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-11-02T12:31:38.077Z", "date_only": false, "value": "2026-11-02T12:31:38.077183Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-114583", "record": "FKIE_CVE-2026-114583", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-02T12:32:42.085Z", "date_only": false, "value": "2026-11-02T12:32:42.085Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-114583", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-02T12:32:42.085Z", "date_only": false, "value": "2026-11-02T12:32:42.085Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-114583", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-02T13:17:35.597Z", "date_only": false, "value": "2026-11-02T13:17:35.597", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-114583", "record": "FKIE_CVE-2026-114583", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-04T22:44:18.000Z", "anchors": {"origin": {"timestamp": "2026-10-22T20:57:36.019Z", "date_only": false, "value": "2026-10-22T20:57:36.019Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-114583", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-22T20:57:36.019Z", "date_only": false, "value": "2026-10-22T20:57:36.019Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-114583", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": {"timestamp": "2026-10-24T01:01:36Z", "date_only": false, "value": "2026-10-24T01:01:36.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-114583", "record": "MSRC_CVE-2026-114583", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": false, "missing": ["start"]}, "disclosure_to_patch": {"available": true, "seconds": 101039.981, "hours": 28.06666138888889, "days": 1.1694442245370371, "min_seconds": 101039.981, "max_seconds": 101039.981, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-22T20:57:36.019Z", "date_only": false, "value": "2026-10-22T20:57:36.019Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-114583", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-24T01:01:36Z", "date_only": false, "value": "2026-10-24T01:01:36.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-114583", "record": "MSRC_CVE-2026-114583", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "time_unpatched": {"available": true, "seconds": 101039.981, "hours": 28.06666138888889, "days": 1.1694442245370371, "min_seconds": 101039.981, "max_seconds": 101039.981, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-22T20:57:36.019Z", "date_only": false, "value": "2026-10-22T20:57:36.019Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-114583", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-24T01:01:36Z", "date_only": false, "value": "2026-10-24T01:01:36.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-114583", "record": "MSRC_CVE-2026-114583", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}