{"metadata": {"vulnerability": "CVE-2026-118669", "count": 72, "kinds": {"milestone": 33, "sighting": 2, "kev": 0, "other": 37}}, "data": [{"timestamp": "2026-10-24T18:41:43Z", "date_only": false, "value": "2026-10-24T18:41:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/oauthlib/oauthlib/security/advisories/GHSA-7984-qgvg-3j9c", "record": "CVE-2026-118669", "field": "creation_timestamp", "uuid": "1fb42318-8f71-40e6-a52b-2cbc7daa9e12", "url": "https://github.com/oauthlib/oauthlib/security/advisories/GHSA-7984-qgvg-3j9c", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-28T17:25:37.562Z", "date_only": false, "value": "2026-10-28T17:25:37.562Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-118669", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-28T21:09:58.893Z", "date_only": false, "value": "2026-10-28T21:09:58.893Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-118669", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T21:09:58.893Z", "date_only": false, "value": "2026-10-28T21:09:58.893Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-118669", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-28T21:09:58.893Z", "date_only": false, "value": "2026-10-28T21:09:58.893Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-118669", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-28T21:20:24.641Z", "date_only": false, "value": "2026-10-28T21:20:24.641964Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117520624784615291", "record": "CVE-2026-118669", "field": "creation_timestamp", "uuid": "905350f1-13f4-433e-9c01-dbe68f706d89", "content": "CVE-2026-118669 OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. Prior to 4.0.0, the client_credentials and Resource Owner Password Credentials token grant handlers can authenticate request.client as one confidential client while retaining an attacker-supplied request.client_id for validate_grant_type and validate_scopes. A lower-privilege authenticated client can therefore cause grant and scope authorization to use another client's identity when an application validator relies on the documented client_id argument, potentially issuing tokens with unauthorized grants or scopes. Validators that authorize exclusively from request.client may not be affected. This issue is fixed in version 4.0.0.\nhttps://www.cve.org/CVERecord?id=CVE-2026-118669https://github.com/oauthlib/oauthlib/security/advisories/GHSA-7984-qgvg-3j9chttps://github.com/oauthlib/oauthlib/pull/920https://github.com/oauthlib/oauthlib/commit/c951a1d09f99f14e3240973fa83c4f4287d4753dhttps://github.com/oauthlib/oauthlib/releases/tag/v4.0.0#oauthlib#CVE_2026_118669#bot", "url": "https://infosec.exchange/users/cve/statuses/117520624784615291"}, {"timestamp": "2026-10-28T22:17:12Z", "date_only": false, "value": "2026-10-28T22:17:12Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7984-QGVG-3J9C", "record": "GHSA-7984-QGVG-3J9C", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-28T22:17:12.610Z", "date_only": false, "value": "2026-10-28T22:17:12.610", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-118669", "record": "FKIE_CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-29T16:19:37.750Z", "date_only": false, "value": "2026-10-29T16:19:37.750", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-118669", "record": "FKIE_CVE-2026-118669", "field": "lastModified"}, {"timestamp": "2026-10-30T00:00:00Z", "date_only": false, "value": "2026-10-30T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-118669", "record": "UBUNTU-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-30T00:00:00Z", "date_only": false, "value": "2026-10-30T00:00:00Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-118669", "record": "UBUNTU-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-30T22:58:16Z", "date_only": false, "value": "2026-10-30T22:58:16Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7984-QGVG-3J9C", "record": "GHSA-7984-QGVG-3J9C", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-30T22:58:16Z", "date_only": false, "value": "2026-10-30T22:58:16Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7984-QGVG-3J9C", "record": "GHSA-7984-QGVG-3J9C", "field": "modified"}, {"timestamp": "2026-10-31T01:13:15Z", "date_only": false, "value": "2026-10-31T01:13:15.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-118669", "record": "MSRC_CVE-2026-118669", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-31T01:13:15Z", "date_only": false, "value": "2026-10-31T01:13:15.000Z", "kind": "other", "label": "None available", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-118669", "record": "MSRC_CVE-2026-118669", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-31T01:13:15Z", "date_only": false, "value": "2026-10-31T01:13:15.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-118669", "record": "MSRC_CVE-2026-118669", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T01:13:15Z", "date_only": false, "value": "2026-10-31T01:13:15.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-118669", "record": "MSRC_CVE-2026-118669", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-31T07:01:16.005Z", "date_only": false, "value": "2026-10-31T07:01:16.005Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-118669", "record": "MSRC_CVE-2026-118669", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-31T08:32:17Z", "date_only": false, "value": "2026-10-31T08:32:17Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-APPRISE-CVE-2026-118669", "record": "BREW-APPRISE-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T08:32:17Z", "date_only": false, "value": "2026-10-31T08:32:17Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-APPRISE-CVE-2026-118669", "record": "BREW-APPRISE-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-31T08:33:13Z", "date_only": false, "value": "2026-10-31T08:33:13Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-ANSIBLE@12-CVE-2026-118669", "record": "BREW-ANSIBLE@12-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T08:33:13Z", "date_only": false, "value": "2026-10-31T08:33:13Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-ANSIBLE@12-CVE-2026-118669", "record": "BREW-ANSIBLE@12-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-31T08:33:34Z", "date_only": false, "value": "2026-10-31T08:33:34Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-ANSIBLE@9-CVE-2026-118669", "record": "BREW-ANSIBLE@9-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T08:33:34Z", "date_only": false, "value": "2026-10-31T08:33:34Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-ANSIBLE@9-CVE-2026-118669", "record": "BREW-ANSIBLE@9-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-31T08:34:52Z", "date_only": false, "value": "2026-10-31T08:34:52Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-ANSIBLE-CVE-2026-118669", "record": "BREW-ANSIBLE-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T08:34:52Z", "date_only": false, "value": "2026-10-31T08:34:52Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-ANSIBLE-CVE-2026-118669", "record": "BREW-ANSIBLE-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-31T08:36:18Z", "date_only": false, "value": "2026-10-31T08:36:18Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-EVERNOTE-BACKUP-CVE-2026-118669", "record": "BREW-EVERNOTE-BACKUP-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T08:36:18Z", "date_only": false, "value": "2026-10-31T08:36:18Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-EVERNOTE-BACKUP-CVE-2026-118669", "record": "BREW-EVERNOTE-BACKUP-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-31T08:43:02Z", "date_only": false, "value": "2026-10-31T08:43:02Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-DUPLICITY-CVE-2026-118669", "record": "BREW-DUPLICITY-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T08:43:02Z", "date_only": false, "value": "2026-10-31T08:43:02Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-DUPLICITY-CVE-2026-118669", "record": "BREW-DUPLICITY-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-31T08:45:30Z", "date_only": false, "value": "2026-10-31T08:45:30Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-DSTACK-CVE-2026-118669", "record": "BREW-DSTACK-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T08:45:30Z", "date_only": false, "value": "2026-10-31T08:45:30Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-DSTACK-CVE-2026-118669", "record": "BREW-DSTACK-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-31T08:54:55Z", "date_only": false, "value": "2026-10-31T08:54:55Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-ANSIBLE@10-CVE-2026-118669", "record": "BREW-ANSIBLE@10-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T08:54:55Z", "date_only": false, "value": "2026-10-31T08:54:55Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-ANSIBLE@10-CVE-2026-118669", "record": "BREW-ANSIBLE@10-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-31T09:08:57Z", "date_only": false, "value": "2026-10-31T09:08:57Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-HERMES-AGENT-CVE-2026-118669", "record": "BREW-HERMES-AGENT-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T09:08:57Z", "date_only": false, "value": "2026-10-31T09:08:57Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-HERMES-AGENT-CVE-2026-118669", "record": "BREW-HERMES-AGENT-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-31T09:14:24Z", "date_only": false, "value": "2026-10-31T09:14:24Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-MCP-GOOGLE-SHEETS-CVE-2026-118669", "record": "BREW-MCP-GOOGLE-SHEETS-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T09:14:24Z", "date_only": false, "value": "2026-10-31T09:14:24Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-MCP-GOOGLE-SHEETS-CVE-2026-118669", "record": "BREW-MCP-GOOGLE-SHEETS-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-31T09:19:49Z", "date_only": false, "value": "2026-10-31T09:19:49Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-MCP-ATLASSIAN-CVE-2026-118669", "record": "BREW-MCP-ATLASSIAN-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T09:19:49Z", "date_only": false, "value": "2026-10-31T09:19:49Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-MCP-ATLASSIAN-CVE-2026-118669", "record": "BREW-MCP-ATLASSIAN-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-31T09:27:59Z", "date_only": false, "value": "2026-10-31T09:27:59Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-SICKCHILL-CVE-2026-118669", "record": "BREW-SICKCHILL-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T09:27:59Z", "date_only": false, "value": "2026-10-31T09:27:59Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-SICKCHILL-CVE-2026-118669", "record": "BREW-SICKCHILL-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-31T09:33:17Z", "date_only": false, "value": "2026-10-31T09:33:17Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-S3QL-CVE-2026-118669", "record": "BREW-S3QL-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T09:33:17Z", "date_only": false, "value": "2026-10-31T09:33:17Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-S3QL-CVE-2026-118669", "record": "BREW-S3QL-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-31T09:40:41Z", "date_only": false, "value": "2026-10-31T09:40:41Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-PROWLER-CVE-2026-118669", "record": "BREW-PROWLER-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T09:40:41Z", "date_only": false, "value": "2026-10-31T09:40:41Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-PROWLER-CVE-2026-118669", "record": "BREW-PROWLER-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-31T09:52:41Z", "date_only": false, "value": "2026-10-31T09:52:41Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-ROCKCRAFT-CVE-2026-118669", "record": "BREW-ROCKCRAFT-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T09:52:41Z", "date_only": false, "value": "2026-10-31T09:52:41Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-ROCKCRAFT-CVE-2026-118669", "record": "BREW-ROCKCRAFT-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-31T10:07:51Z", "date_only": false, "value": "2026-10-31T10:07:51Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-TWARC-CVE-2026-118669", "record": "BREW-TWARC-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T10:12:39Z", "date_only": false, "value": "2026-10-31T10:12:39Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-GCALCLI-CVE-2026-118669", "record": "BREW-GCALCLI-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T10:12:39Z", "date_only": false, "value": "2026-10-31T10:12:39Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-GCALCLI-CVE-2026-118669", "record": "BREW-GCALCLI-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-31T10:16:07Z", "date_only": false, "value": "2026-10-31T10:16:07Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-DVC-CVE-2026-118669", "record": "BREW-DVC-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T10:21:10Z", "date_only": false, "value": "2026-10-31T10:21:10Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-GYB-CVE-2026-118669", "record": "BREW-GYB-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T10:21:10Z", "date_only": false, "value": "2026-10-31T10:21:10Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-GYB-CVE-2026-118669", "record": "BREW-GYB-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-31T10:24:35Z", "date_only": false, "value": "2026-10-31T10:24:35Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-CHARMCRAFT-CVE-2026-118669", "record": "BREW-CHARMCRAFT-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T10:24:35Z", "date_only": false, "value": "2026-10-31T10:24:35Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-CHARMCRAFT-CVE-2026-118669", "record": "BREW-CHARMCRAFT-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-31T10:35:22Z", "date_only": false, "value": "2026-10-31T10:35:22Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-GGSHIELD-CVE-2026-118669", "record": "BREW-GGSHIELD-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T10:35:22Z", "date_only": false, "value": "2026-10-31T10:35:22Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-GGSHIELD-CVE-2026-118669", "record": "BREW-GGSHIELD-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-31T10:38:15Z", "date_only": false, "value": "2026-10-31T10:38:15Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-ANSIBLE@13-CVE-2026-118669", "record": "BREW-ANSIBLE@13-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T10:38:15Z", "date_only": false, "value": "2026-10-31T10:38:15Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-ANSIBLE@13-CVE-2026-118669", "record": "BREW-ANSIBLE@13-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-31T10:41:48Z", "date_only": false, "value": "2026-10-31T10:41:48Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-CONFLUENCE-MARKDOWN-EXPORTER-CVE-2026-118669", "record": "BREW-CONFLUENCE-MARKDOWN-EXPORTER-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T10:41:48Z", "date_only": false, "value": "2026-10-31T10:41:48Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-CONFLUENCE-MARKDOWN-EXPORTER-CVE-2026-118669", "record": "BREW-CONFLUENCE-MARKDOWN-EXPORTER-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-31T10:57:54Z", "date_only": false, "value": "2026-10-31T10:57:54Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-SNAPCRAFT-CVE-2026-118669", "record": "BREW-SNAPCRAFT-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T10:57:54Z", "date_only": false, "value": "2026-10-31T10:57:54Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-SNAPCRAFT-CVE-2026-118669", "record": "BREW-SNAPCRAFT-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-31T11:02:18Z", "date_only": false, "value": "2026-10-31T11:02:18Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-PARSEDMARC-CVE-2026-118669", "record": "BREW-PARSEDMARC-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T11:02:18Z", "date_only": false, "value": "2026-10-31T11:02:18Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-PARSEDMARC-CVE-2026-118669", "record": "BREW-PARSEDMARC-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-31T11:37:05Z", "date_only": false, "value": "2026-10-31T11:37:05Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-SCOUTSUITE-CVE-2026-118669", "record": "BREW-SCOUTSUITE-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T11:37:05Z", "date_only": false, "value": "2026-10-31T11:37:05Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-SCOUTSUITE-CVE-2026-118669", "record": "BREW-SCOUTSUITE-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-31T12:25:22Z", "date_only": false, "value": "2026-10-31T12:25:22Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-VDIRSYNCER-CVE-2026-118669", "record": "BREW-VDIRSYNCER-CVE-2026-118669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T15:54:19Z", "date_only": false, "value": "2026-10-31T15:54:19Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-DVC-CVE-2026-118669", "record": "BREW-DVC-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-31T15:54:19Z", "date_only": false, "value": "2026-10-31T15:54:19Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-TWARC-CVE-2026-118669", "record": "BREW-TWARC-CVE-2026-118669", "field": "modified"}, {"timestamp": "2026-10-31T15:54:19Z", "date_only": false, "value": "2026-10-31T15:54:19Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-VDIRSYNCER-CVE-2026-118669", "record": "BREW-VDIRSYNCER-CVE-2026-118669", "field": "modified"}], "metrics": {"as_of": "2026-11-02T06:39:14.671Z", "anchors": {"origin": {"timestamp": "2026-10-28T21:09:58.893Z", "date_only": false, "value": "2026-10-28T21:09:58.893Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-118669", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-28T21:09:58.893Z", "date_only": false, "value": "2026-10-28T21:09:58.893Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-118669", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-10-24T18:41:43Z", "date_only": false, "value": "2026-10-24T18:41:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/oauthlib/oauthlib/security/advisories/GHSA-7984-qgvg-3j9c", "record": "CVE-2026-118669", "field": "creation_timestamp", "uuid": "1fb42318-8f71-40e6-a52b-2cbc7daa9e12", "url": "https://github.com/oauthlib/oauthlib/security/advisories/GHSA-7984-qgvg-3j9c", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": -354495.893, "hours": -98.47108138888889, "days": -4.102961724537037, "min_seconds": -354495.893, "max_seconds": -354495.893, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2026-10-28T21:09:58.893Z", "date_only": false, "value": "2026-10-28T21:09:58.893Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-118669", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-24T18:41:43Z", "date_only": false, "value": "2026-10-24T18:41:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/oauthlib/oauthlib/security/advisories/GHSA-7984-qgvg-3j9c", "record": "CVE-2026-118669", "field": "creation_timestamp", "uuid": "1fb42318-8f71-40e6-a52b-2cbc7daa9e12", "url": "https://github.com/oauthlib/oauthlib/security/advisories/GHSA-7984-qgvg-3j9c", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 379755.778183, "hours": 105.48771616194445, "days": 4.395321506747685, "min_seconds": 379755.778183, "max_seconds": 379755.778183, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-28T21:09:58.893Z", "date_only": false, "value": "2026-10-28T21:09:58.893Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-118669", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-02T06:39:14.671Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 734251.671183, "hours": 203.95879755083334, "days": 8.498283231284722, "min_seconds": 734251.671183, "max_seconds": 734251.671183, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-24T18:41:43Z", "date_only": false, "value": "2026-10-24T18:41:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/oauthlib/oauthlib/security/advisories/GHSA-7984-qgvg-3j9c", "record": "CVE-2026-118669", "field": "creation_timestamp", "uuid": "1fb42318-8f71-40e6-a52b-2cbc7daa9e12", "url": "https://github.com/oauthlib/oauthlib/security/advisories/GHSA-7984-qgvg-3j9c", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-02T06:39:14.671Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}