{"metadata": {"vulnerability": "CVE-2026-119196", "count": 101, "kinds": {"milestone": 35, "sighting": 3, "kev": 0, "other": 63}, "linked_omitted": 0}, "data": [{"timestamp": "2026-09-28T20:26:13.674Z", "date_only": false, "value": "2026-09-28T20:26:13.674000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2026-09-28T20:31:53.066Z", "date_only": false, "value": "2026-09-28T20:31:53.066000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2026-09-28T20:36:31.530Z", "date_only": false, "value": "2026-09-28T20:36:31.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2026-09-28T20:38:28.161Z", "date_only": false, "value": "2026-09-28T20:38:28.161000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.3.release_date", "linked_record": true}, {"timestamp": "2026-09-28T20:40:56.952Z", "date_only": false, "value": "2026-09-28T20:40:56.952621+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2026-09-28T20:41:35.219Z", "date_only": false, "value": "2026-09-28T20:41:35.219179+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2026-09-28T20:51:42.409Z", "date_only": false, "value": "2026-09-28T20:51:42.409127+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.2.discovery_date", "linked_record": true}, {"timestamp": "2026-09-28T20:52:12.127Z", "date_only": false, "value": "2026-09-28T20:52:12.127939+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.3.discovery_date", "linked_record": true}, {"timestamp": "2026-10-22T16:25:32.509Z", "date_only": false, "value": "2026-10-22T16:25:32.509000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.4.release_date", "linked_record": true}, {"timestamp": "2026-10-22T16:42:27.165Z", "date_only": false, "value": "2026-10-22T16:42:27.165994+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.4.discovery_date", "linked_record": true}, {"timestamp": "2026-10-29T16:04:48.728Z", "date_only": false, "value": "2026-10-29T16:04:48.728Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-119196", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-29T19:38:14.056Z", "date_only": false, "value": "2026-10-29T19:38:14.056000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.5.release_date", "linked_record": true}, {"timestamp": "2026-10-29T19:41:37.352Z", "date_only": false, "value": "2026-10-29T19:41:37.352000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.6.release_date", "linked_record": true}, {"timestamp": "2026-10-29T19:44:46.031Z", "date_only": false, "value": "2026-10-29T19:44:46.031Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-119196", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-29T19:44:46.031Z", "date_only": false, "value": "2026-10-29T19:44:46.031000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.7.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-29T19:44:46.031Z", "date_only": false, "value": "2026-10-29T19:44:46.031Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-119196", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-29T19:47:11.026Z", "date_only": false, "value": "2026-10-29T19:47:11.026579Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117525920451436939", "record": "CVE-2026-119196", "field": "creation_timestamp", "uuid": "a4e6f7f4-722e-4304-808d-9f2eb91bc470", "content": "CVE-2026-119196 pyasn1: Quadratic CPU consumption in constructed BIT STRING decoding pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed BIT STRING decoding repeatedly shifts and copies the complete bit value accumulated from earlier fragments. Attacker-controlled BER or CER input contains many constructed BIT STRING fragments; schema-driven DER also accepts a definite-length constructed BIT STRING. BitStringPayloadDecoder repeatedly calls BitString.fromOctetString with the prior bitString as prepend, shifting an ever-growing SizedInteger for each fragment and causing quadratic work. Large fragmented values can exhaust CPU during decode() without requiring later conversion or formatting. This issue is fixed in version 0.6.5.\nhttps://www.cve.org/CVERecord?id=CVE-2026-119196https://github.com/pyasn1/pyasn1/security/advisories/GHSA-2qm8-x737-gmw5https://github.com/pyasn1/pyasn1/pull/132https://github.com/pyasn1/pyasn1/commit/73ba7b043cc7e92cb37f16f2c955bff93b0e6f6chttps://github.com/pyasn1/pyasn1/releases/tag/v0.6.5#pyasn1#CVE_2026_119196#bot", "url": "https://infosec.exchange/users/cve/statuses/117525920451436939"}, {"timestamp": "2026-10-29T19:59:48.293Z", "date_only": false, "value": "2026-10-29T19:59:48.293862+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.6.discovery_date", "linked_record": true}, {"timestamp": "2026-10-29T20:04:23.885Z", "date_only": false, "value": "2026-10-29T20:04:23.885333+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.5.discovery_date", "linked_record": true}, {"timestamp": "2026-10-29T20:13:17.827Z", "date_only": false, "value": "2026-10-29T20:13:17.827067+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.7.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-29T20:17:00Z", "date_only": false, "value": "2026-10-29T20:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-119196", "record": "UBUNTU-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-29T20:17:30Z", "date_only": false, "value": "2026-10-29T20:17:30Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2QM8-X737-GMW5", "record": "GHSA-2QM8-X737-GMW5", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-29T20:17:30.770Z", "date_only": false, "value": "2026-10-29T20:17:30.770", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-119196", "record": "FKIE_CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-29T21:02:24.845Z", "date_only": false, "value": "2026-10-29T21:02:24.845954Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mz25zjo4sy2s", "record": "CVE-2026-119196", "field": "creation_timestamp", "uuid": "f353101f-51de-4d32-946d-05d334cc7d3d", "content": "\ud83d\udfe0 CVE-2026-119196 - High (7.5)\n\npyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed BIT STRING decoding rep...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-119196/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mz25zjo4sy2s"}, {"timestamp": "2026-10-30T23:07:04Z", "date_only": false, "value": "2026-10-30T23:07:04Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2QM8-X737-GMW5", "record": "GHSA-2QM8-X737-GMW5", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T23:07:04Z", "date_only": false, "value": "2026-10-30T23:07:04Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2QM8-X737-GMW5", "record": "GHSA-2QM8-X737-GMW5", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T01:01:45Z", "date_only": false, "value": "2026-10-31T01:01:45.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-119196", "record": "MSRC_CVE-2026-119196", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-31T01:01:45Z", "date_only": false, "value": "2026-10-31T01:01:45.000Z", "kind": "other", "label": "None available", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-119196", "record": "MSRC_CVE-2026-119196", "field": "vulnerabilities.0.remediations.0.date", "linked_record": true}, {"timestamp": "2026-10-31T01:01:45Z", "date_only": false, "value": "2026-10-31T01:01:45.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-119196", "record": "MSRC_CVE-2026-119196", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T01:01:45Z", "date_only": false, "value": "2026-10-31T01:01:45.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-119196", "record": "MSRC_CVE-2026-119196", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-31T07:01:15.989Z", "date_only": false, "value": "2026-10-31T07:01:15.989Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-119196", "record": "MSRC_CVE-2026-119196", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-10-31T08:33:13Z", "date_only": false, "value": "2026-10-31T08:33:13Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-ANSIBLE@12-CVE-2026-119196", "record": "BREW-ANSIBLE@12-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T08:33:13Z", "date_only": false, "value": "2026-10-31T08:33:13Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-ANSIBLE@12-CVE-2026-119196", "record": "BREW-ANSIBLE@12-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T08:33:34Z", "date_only": false, "value": "2026-10-31T08:33:34Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-ANSIBLE@9-CVE-2026-119196", "record": "BREW-ANSIBLE@9-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T08:33:34Z", "date_only": false, "value": "2026-10-31T08:33:34Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-ANSIBLE@9-CVE-2026-119196", "record": "BREW-ANSIBLE@9-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T08:34:03Z", "date_only": false, "value": "2026-10-31T08:34:03Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-AWS-SHELL-CVE-2026-119196", "record": "BREW-AWS-SHELL-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T08:34:52Z", "date_only": false, "value": "2026-10-31T08:34:52Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-ANSIBLE-CVE-2026-119196", "record": "BREW-ANSIBLE-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T08:40:46Z", "date_only": false, "value": "2026-10-31T08:40:46Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-LDEEP-CVE-2026-119196", "record": "BREW-LDEEP-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T08:43:02Z", "date_only": false, "value": "2026-10-31T08:43:02Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-DUPLICITY-CVE-2026-119196", "record": "BREW-DUPLICITY-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T08:45:30Z", "date_only": false, "value": "2026-10-31T08:45:30Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-DSTACK-CVE-2026-119196", "record": "BREW-DSTACK-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T08:45:30Z", "date_only": false, "value": "2026-10-31T08:45:30Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-DSTACK-CVE-2026-119196", "record": "BREW-DSTACK-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T08:54:55Z", "date_only": false, "value": "2026-10-31T08:54:55Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-ANSIBLE@10-CVE-2026-119196", "record": "BREW-ANSIBLE@10-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T08:54:55Z", "date_only": false, "value": "2026-10-31T08:54:55Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-ANSIBLE@10-CVE-2026-119196", "record": "BREW-ANSIBLE@10-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T09:01:17Z", "date_only": false, "value": "2026-10-31T09:01:17Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-CVE-BIN-TOOL-CVE-2026-119196", "record": "BREW-CVE-BIN-TOOL-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T09:08:57Z", "date_only": false, "value": "2026-10-31T09:08:57Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-HERMES-AGENT-CVE-2026-119196", "record": "BREW-HERMES-AGENT-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T09:09:54Z", "date_only": false, "value": "2026-10-31T09:09:54Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-OTERM-CVE-2026-119196", "record": "BREW-OTERM-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T09:14:24Z", "date_only": false, "value": "2026-10-31T09:14:24Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-MCP-GOOGLE-SHEETS-CVE-2026-119196", "record": "BREW-MCP-GOOGLE-SHEETS-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T09:24:41Z", "date_only": false, "value": "2026-10-31T09:24:41Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-MOLECULE-CVE-2026-119196", "record": "BREW-MOLECULE-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T09:33:17Z", "date_only": false, "value": "2026-10-31T09:33:17Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-S3QL-CVE-2026-119196", "record": "BREW-S3QL-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T09:40:41Z", "date_only": false, "value": "2026-10-31T09:40:41Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-PROWLER-CVE-2026-119196", "record": "BREW-PROWLER-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T09:40:41Z", "date_only": false, "value": "2026-10-31T09:40:41Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-PROWLER-CVE-2026-119196", "record": "BREW-PROWLER-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T09:58:06Z", "date_only": false, "value": "2026-10-31T09:58:06Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-AWSCLI@1-CVE-2026-119196", "record": "BREW-AWSCLI@1-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T10:13:10Z", "date_only": false, "value": "2026-10-31T10:13:10Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-GCALCLI-CVE-2026-119196", "record": "BREW-GCALCLI-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T10:16:07Z", "date_only": false, "value": "2026-10-31T10:16:07Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-DVC-CVE-2026-119196", "record": "BREW-DVC-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T10:21:14Z", "date_only": false, "value": "2026-10-31T10:21:14Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-GYB-CVE-2026-119196", "record": "BREW-GYB-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T10:21:14Z", "date_only": false, "value": "2026-10-31T10:21:14Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-GYB-CVE-2026-119196", "record": "BREW-GYB-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T10:23:12Z", "date_only": false, "value": "2026-10-31T10:23:12Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-CERTSYNC-CVE-2026-119196", "record": "BREW-CERTSYNC-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T10:23:12Z", "date_only": false, "value": "2026-10-31T10:23:12Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-CERTSYNC-CVE-2026-119196", "record": "BREW-CERTSYNC-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T10:26:31Z", "date_only": false, "value": "2026-10-31T10:26:31Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-GLANCES-CVE-2026-119196", "record": "BREW-GLANCES-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T10:31:42Z", "date_only": false, "value": "2026-10-31T10:31:42Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-MISTRAL-VIBE-CVE-2026-119196", "record": "BREW-MISTRAL-VIBE-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T10:38:15Z", "date_only": false, "value": "2026-10-31T10:38:15Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-ANSIBLE@13-CVE-2026-119196", "record": "BREW-ANSIBLE@13-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T10:38:15Z", "date_only": false, "value": "2026-10-31T10:38:15Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-ANSIBLE@13-CVE-2026-119196", "record": "BREW-ANSIBLE@13-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T11:02:18Z", "date_only": false, "value": "2026-10-31T11:02:18Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-PARSEDMARC-CVE-2026-119196", "record": "BREW-PARSEDMARC-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T11:03:21Z", "date_only": false, "value": "2026-10-31T11:03:21Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-KIMI-CLI-CVE-2026-119196", "record": "BREW-KIMI-CLI-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T11:03:21Z", "date_only": false, "value": "2026-10-31T11:03:21Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-KIMI-CLI-CVE-2026-119196", "record": "BREW-KIMI-CLI-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T11:37:05Z", "date_only": false, "value": "2026-10-31T11:37:05Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-SCOUTSUITE-CVE-2026-119196", "record": "BREW-SCOUTSUITE-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T11:52:17Z", "date_only": false, "value": "2026-10-31T11:52:17Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-SMBCLIENT-NG-CVE-2026-119196", "record": "BREW-SMBCLIENT-NG-CVE-2026-119196", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T14:30:51Z", "date_only": false, "value": "2026-10-31T14:30:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/be24644d0430f75528b7f23dee28c598", "record": "CVE-2026-119196", "field": "creation_timestamp", "uuid": "63200392-e008-4af4-be2a-b91b48fb6c8e", "content": "# CVE-2026-119196: CVE-2026-119196: Quadratic CPU Consumption in pyasn1 Constructed BIT STRING Decoding\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-10-30\n> **Full Report:** https://cvereports.com/reports/CVE-2026-119196\n\n## Summary\nA vulnerability classified under CWE-407 (Inefficient Algorithmic Complexity) exists in the pyasn1 library prior to version 0.6.5. When parsing constructed ASN.1 BIT STRING payloads under BER, CER, or schema-driven DER encoding rules, the BitStringPayloadDecoder repeatedly shifts and copies the entire accumulated bit value for each incoming fragment. Processing inputs with a large number of small constructed fragments induces quadratic CPU consumption, allowing unauthenticated remote attackers to cause a denial of service via resource exhaustion during the initial decoding phase.\n\n## TL;DR\npyasn1 versions prior to 0.6.5 exhibit quadratic time complexity when reassembling constructed ASN.1 BIT STRING fragments. Remote attackers can transmit payloads containing thousands of small fragments to exhaust CPU resources and block application worker threads. Upgrading to pyasn1 0.6.5 resolves the issue by accumulating fragments into a mutable bytearray prior to instantiation.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **Vulnerability Type**: CWE-407: Inefficient Algorithmic Complexity\n- **Attack Vector**: Network (Unauthenticated ASN.1 BER/CER/DER Payload)\n- **CVSS v3.1 Score**: 7.5 High (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n- **EPSS Score**: 0.43% (36.80th Percentile)\n- **Primary Impact**: Denial of Service via Quadratic CPU Exhaustion\n- **Affected Component**: pyasn1 BitStringPayloadDecoder (< 0.6.5)\n- **Patched Version**: pyasn1 0.6.5\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- pyasn1\n- **pyasn1**: < 0.6.5 (Fixed in: `0.6.5`)\n\n## Mitigation\n\n- Upgrade pyasn1 to version 0.6.5 or later across all virtual environments, container images, and transitive dependency lockfiles.\n- Enforce strict transport-layer and application-layer maximum payload size limits before passing untrusted byte streams to pyasn1 decoders.\n- Disable constructed BIT STRING decoding (supportConstructedForm = False) in custom decoder subclasses if protocol specifications strictly require primitive DER encoding.\n- Configure process-level execution timeouts on worker processes handling untrusted ASN.1 inputs to terminate threads stalled by CPU exhaustion.\n\n**Remediation Steps:**\n1. Audit installed Python packages and lockfiles (`requirements.txt`, `Pipfile.lock`, `poetry.lock`) using `pip-audit` or `pip list` to identify `pyasn1` versions prior to `0.6.5`.\n2. Execute `pip install --upgrade \"pyasn1>=0.6.5\"` in affected environments and rebuild deployment artifacts.\n3. Verify the installed version by running `python -c \"import pyasn1; print(pyasn1.__version__)\"` and confirming the output is `0.6.5` or higher.\n4. Restart long-running Python services and worker daemons to ensure the updated `pyasn1` module is loaded into memory.\n\n## References\n\n- [GitHub Security Advisory: GHSA-2qm8-x737-gmw5](https://github.com/pyasn1/pyasn1/security/advisories/GHSA-2qm8-x737-gmw5)\n- [Official Patch Commit (73ba7b043cc7e92cb37f16f2c955bff93b0e6f6c)](https://github.com/pyasn1/pyasn1/commit/73ba7b043cc7e92cb37f16f2c955bff93b0e6f6c)\n- [pyasn1 Pull Request #132](https://github.com/pyasn1/pyasn1/pull/132)\n- [pyasn1 v0.6.5 Release](https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5)\n- [NIST National Vulnerability Database (NVD) - CVE-2026-119196](https://nvd.nist.gov/vuln/detail/CVE-2026-119196)\n- [CVE.org Record: CVE-2026-119196](https://www.cve.org/CVERecord?id=CVE-2026-119196)\n- [Red Hat Bugzilla #2563666](https://bugzilla.redhat.com/show_bug.cgi?id=2563666)\n- [Red Hat Security CVE Tracker: CVE-2026-119196](https://access.redhat.com/security/cve/cve-2026-119196)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-119196) - Automated Vulnerability Intelligence*", "url": "https://gist.github.com/alon710/be24644d0430f75528b7f23dee28c598"}, {"timestamp": "2026-10-31T15:54:19Z", "date_only": false, "value": "2026-10-31T15:54:19Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-DVC-CVE-2026-119196", "record": "BREW-DVC-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T16:11:59Z", "date_only": false, "value": "2026-10-31T16:11:59Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-HERMES-AGENT-CVE-2026-119196", "record": "BREW-HERMES-AGENT-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T18:50:42Z", "date_only": false, "value": "2026-10-31T18:50:42Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-AWS-SHELL-CVE-2026-119196", "record": "BREW-AWS-SHELL-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T18:52:12Z", "date_only": false, "value": "2026-10-31T18:52:12Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-DUPLICITY-CVE-2026-119196", "record": "BREW-DUPLICITY-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T18:52:28Z", "date_only": false, "value": "2026-10-31T18:52:28Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-ANSIBLE-CVE-2026-119196", "record": "BREW-ANSIBLE-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T18:59:35Z", "date_only": false, "value": "2026-10-31T18:59:35Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-OTERM-CVE-2026-119196", "record": "BREW-OTERM-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T19:04:08Z", "date_only": false, "value": "2026-10-31T19:04:08Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-MCP-GOOGLE-SHEETS-CVE-2026-119196", "record": "BREW-MCP-GOOGLE-SHEETS-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T19:05:28Z", "date_only": false, "value": "2026-10-31T19:05:28Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-S3QL-CVE-2026-119196", "record": "BREW-S3QL-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T19:05:35Z", "date_only": false, "value": "2026-10-31T19:05:35Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-MOLECULE-CVE-2026-119196", "record": "BREW-MOLECULE-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T19:22:32Z", "date_only": false, "value": "2026-10-31T19:22:32Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-CVE-BIN-TOOL-CVE-2026-119196", "record": "BREW-CVE-BIN-TOOL-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T19:26:28Z", "date_only": false, "value": "2026-10-31T19:26:28Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-GCALCLI-CVE-2026-119196", "record": "BREW-GCALCLI-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T19:40:53Z", "date_only": false, "value": "2026-10-31T19:40:53Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-GLANCES-CVE-2026-119196", "record": "BREW-GLANCES-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T20:10:04Z", "date_only": false, "value": "2026-10-31T20:10:04Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-PARSEDMARC-CVE-2026-119196", "record": "BREW-PARSEDMARC-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T20:43:52Z", "date_only": false, "value": "2026-10-31T20:43:52Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-SCOUTSUITE-CVE-2026-119196", "record": "BREW-SCOUTSUITE-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-31T20:55:36Z", "date_only": false, "value": "2026-10-31T20:55:36Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-SMBCLIENT-NG-CVE-2026-119196", "record": "BREW-SMBCLIENT-NG-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-04T01:40:25.017Z", "date_only": false, "value": "2026-11-04T01:40:25.017112Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-119196", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-11-04T01:40:25.017Z", "date_only": false, "value": "2026-11-04T01:40:25.017112Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-119196", "record": "FKIE_CVE-2026-119196", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-04T01:40:46.787Z", "date_only": false, "value": "2026-11-04T01:40:46.787Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-119196", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-04T01:40:46.787Z", "date_only": false, "value": "2026-11-04T01:40:46.787Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-119196", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-04T02:17:18.177Z", "date_only": false, "value": "2026-11-04T02:17:18.177", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-119196", "record": "FKIE_CVE-2026-119196", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-04T12:50:50Z", "date_only": false, "value": "2026-11-04T12:50:50Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-CX86717", "record": "CLEANSTART-2026-CX86717", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-04T15:42:45Z", "date_only": false, "value": "2026-11-04T15:42:45+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-11-04T15:42:45Z", "date_only": false, "value": "2026-11-04T15:42:45+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-04T15:42:45Z", "date_only": false, "value": "2026-11-04T15:42:45+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.7.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-04T15:42:54Z", "date_only": false, "value": "2026-11-04T15:42:54+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-05T00:36:24.921Z", "date_only": false, "value": "2026-11-05T00:36:24.921993Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-CX86717", "record": "CLEANSTART-2026-CX86717", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-08T09:12:33Z", "date_only": false, "value": "2026-11-08T09:12:33Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-LDEEP-CVE-2026-119196", "record": "BREW-LDEEP-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-08T09:54:44Z", "date_only": false, "value": "2026-11-08T09:54:44Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-AWSCLI@1-CVE-2026-119196", "record": "BREW-AWSCLI@1-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-08T10:18:50Z", "date_only": false, "value": "2026-11-08T10:18:50Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-MISTRAL-VIBE-CVE-2026-119196", "record": "BREW-MISTRAL-VIBE-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-09T23:59:32Z", "date_only": false, "value": "2026-11-09T23:59:32Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-119196", "record": "UBUNTU-CVE-2026-119196", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-10T22:16:21Z", "date_only": false, "value": "2026-11-10T22:16:21+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-10T22:16:21Z", "date_only": false, "value": "2026-11-10T22:16:21+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-10T22:16:21Z", "date_only": false, "value": "2026-11-10T22:16:21+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "document.tracking.current_release_date", "linked_record": true}], "metrics": {"as_of": "2026-11-11T04:53:22.498Z", "anchors": {"origin": {"timestamp": "2026-10-29T19:44:46.031Z", "date_only": false, "value": "2026-10-29T19:44:46.031000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.7.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": {"timestamp": "2026-10-29T20:13:17.827Z", "date_only": false, "value": "2026-10-29T20:13:17.827067+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.7.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-29T19:44:46.031Z", "date_only": false, "value": "2026-10-29T19:44:46.031000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.7.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": {"timestamp": "2026-11-04T15:42:45Z", "date_only": false, "value": "2026-11-04T15:42:45+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.7.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 502167.173, "hours": 139.49088138888888, "days": 5.812120057870371, "min_seconds": 502167.173, "max_seconds": 502167.173, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-29T20:13:17.827Z", "date_only": false, "value": "2026-10-29T20:13:17.827067+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.7.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-04T15:42:45Z", "date_only": false, "value": "2026-11-04T15:42:45+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.7.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, "discovery_after_disclosure": true}, "disclosure_to_patch": {"available": true, "seconds": 503878.969, "hours": 139.96638027777777, "days": 5.831932511574074, "min_seconds": 503878.969, "max_seconds": 503878.969, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-29T19:44:46.031Z", "date_only": false, "value": "2026-10-29T19:44:46.031000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.7.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-04T15:42:45Z", "date_only": false, "value": "2026-11-04T15:42:45+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.7.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 503878.969, "hours": 139.96638027777777, "days": 5.831932511574074, "min_seconds": 503878.969, "max_seconds": 503878.969, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-29T19:44:46.031Z", "date_only": false, "value": "2026-10-29T19:44:46.031000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.7.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-04T15:42:45Z", "date_only": false, "value": "2026-11-04T15:42:45+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:95261", "record": "RHSA-2026:95261", "field": "vulnerabilities.7.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}