{"metadata": {"vulnerability": "CVE-2026-24281", "count": 442, "kinds": {"milestone": 77, "sighting": 6, "kev": 0, "other": 359}, "linked_omitted": 0}, "data": [{"timestamp": "2025-06-18T15:26:47.633Z", "date_only": false, "value": "2025-06-18T15:26:47.633000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2025-09-03T20:56:50.732Z", "date_only": false, "value": "2025-09-03T20:56:50.732000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2025-09-03T21:01:22.935Z", "date_only": false, "value": "2025-09-03T21:01:22.935850+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.2.discovery_date", "linked_record": true}, {"timestamp": "2025-10-07T00:00:00Z", "date_only": false, "value": "2025-10-07T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2025-10-23T02:53:02.820Z", "date_only": false, "value": "2025-10-23T02:53:02.820000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.2.discovery_date", "linked_record": true}, {"timestamp": "2025-10-28T09:00:00Z", "date_only": false, "value": "2025-10-28T09:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2025-12-02T18:54:10.166Z", "date_only": false, "value": "2025-12-02T18:54:10.166000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.6.release_date", "linked_record": true}, {"timestamp": "2025-12-02T20:01:45.330Z", "date_only": false, "value": "2025-12-02T20:01:45.330964+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.6.discovery_date", "linked_record": true}, {"timestamp": "2025-12-05T16:02:15.271Z", "date_only": false, "value": "2025-12-05T16:02:15.271000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.7.release_date", "linked_record": true}, {"timestamp": "2025-12-05T16:06:08.531Z", "date_only": false, "value": "2025-12-05T16:06:08.531000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.8.release_date", "linked_record": true}, {"timestamp": "2025-12-05T17:01:20.277Z", "date_only": false, "value": "2025-12-05T17:01:20.277857+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.7.discovery_date", "linked_record": true}, {"timestamp": "2025-12-05T17:02:21.597Z", "date_only": false, "value": "2025-12-05T17:02:21.597728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.8.discovery_date", "linked_record": true}, {"timestamp": "2025-12-17T00:00:00Z", "date_only": false, "value": "2025-12-17T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2025-12-17T16:01:18.173Z", "date_only": false, "value": "2025-12-17T16:01:18.173727+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2025-12-31T01:15:36.827Z", "date_only": false, "value": "2025-12-31T01:15:36.827000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.9.release_date", "linked_record": true}, {"timestamp": "2025-12-31T02:00:55.240Z", "date_only": false, "value": "2025-12-31T02:00:55.240416+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.9.discovery_date", "linked_record": true}, {"timestamp": "2026-01-01T07:03:57.277Z", "date_only": false, "value": "2026-01-01T07:03:57.277000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2026-01-01T08:00:48.932Z", "date_only": false, "value": "2026-01-01T08:00:48.932809+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2026-01-05T22:00:17.715Z", "date_only": false, "value": "2026-01-05T22:00:17.715000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.10.release_date", "linked_record": true}, {"timestamp": "2026-01-05T23:19:31.396Z", "date_only": false, "value": "2026-01-05T23:19:31.396000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.11.release_date", "linked_record": true}, {"timestamp": "2026-01-05T23:30:33.440Z", "date_only": false, "value": "2026-01-05T23:30:33.440000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.12.release_date", "linked_record": true}, {"timestamp": "2026-01-06T00:01:02.119Z", "date_only": false, "value": "2026-01-06T00:01:02.119065+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.12.discovery_date", "linked_record": true}, {"timestamp": "2026-01-06T00:01:17.036Z", "date_only": false, "value": "2026-01-06T00:01:17.036900+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.11.discovery_date", "linked_record": true}, {"timestamp": "2026-01-06T20:01:19.831Z", "date_only": false, "value": "2026-01-06T20:01:19.831548+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.10.discovery_date", "linked_record": true}, {"timestamp": "2026-01-07T22:09:01.936Z", "date_only": false, "value": "2026-01-07T22:09:01.936000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.19.release_date", "linked_record": true}, {"timestamp": "2026-01-07T23:01:59.422Z", "date_only": false, "value": "2026-01-07T23:01:59.422078+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.19.discovery_date", "linked_record": true}, {"timestamp": "2026-01-10T06:39:02.276Z", "date_only": false, "value": "2026-01-10T06:39:02.276000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.20.release_date", "linked_record": true}, {"timestamp": "2026-01-10T07:01:22.641Z", "date_only": false, "value": "2026-01-10T07:01:22.641229+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.20.discovery_date", "linked_record": true}, {"timestamp": "2026-01-15T20:50:25.642Z", "date_only": false, "value": "2026-01-15T20:50:25.642000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.16.release_date", "linked_record": true}, {"timestamp": "2026-01-15T20:50:25.642Z", "date_only": false, "value": "2026-01-15T20:50:25.642000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.3.release_date", "linked_record": true}, {"timestamp": "2026-01-15T21:03:20.088Z", "date_only": false, "value": "2026-01-15T21:03:20.088599+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.16.discovery_date", "linked_record": true}, {"timestamp": "2026-01-15T21:03:20.088Z", "date_only": false, "value": "2026-01-15T21:03:20.088599+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.3.discovery_date", "linked_record": true}, {"timestamp": "2026-01-21T19:05:28.846Z", "date_only": false, "value": "2026-01-21T19:05:28.846000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2026-01-21T19:40:25.776Z", "date_only": false, "value": "2026-01-21T19:40:25.776Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-24281", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-01-21T20:01:28.774Z", "date_only": false, "value": "2026-01-21T20:01:28.774829+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2026-01-21T21:13:11.894Z", "date_only": false, "value": "2026-01-21T21:13:11.894000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.21.release_date", "linked_record": true}, {"timestamp": "2026-01-21T22:00:55.823Z", "date_only": false, "value": "2026-01-21T22:00:55.823882+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.21.discovery_date", "linked_record": true}, {"timestamp": "2026-01-22T04:02:08.706Z", "date_only": false, "value": "2026-01-22T04:02:08.706000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.22.release_date", "linked_record": true}, {"timestamp": "2026-01-22T05:00:54.709Z", "date_only": false, "value": "2026-01-22T05:00:54.709179+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.22.discovery_date", "linked_record": true}, {"timestamp": "2026-01-26T19:16:38.250Z", "date_only": false, "value": "2026-01-26T19:16:38.250000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.6.release_date", "linked_record": true}, {"timestamp": "2026-01-26T20:01:54.396Z", "date_only": false, "value": "2026-01-26T20:01:54.396535+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.6.discovery_date", "linked_record": true}, {"timestamp": "2026-01-27T00:34:06.229Z", "date_only": false, "value": "2026-01-27T00:34:06.229000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.25.release_date", "linked_record": true}, {"timestamp": "2026-01-27T01:00:58.032Z", "date_only": false, "value": "2026-01-27T01:00:58.032530+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.25.discovery_date", "linked_record": true}, {"timestamp": "2026-01-27T22:01:13.808Z", "date_only": false, "value": "2026-01-27T22:01:13.808000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.26.release_date", "linked_record": true}, {"timestamp": "2026-01-27T23:00:53.998Z", "date_only": false, "value": "2026-01-27T23:00:53.998772+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.26.discovery_date", "linked_record": true}, {"timestamp": "2026-01-28T19:30:31.215Z", "date_only": false, "value": "2026-01-28T19:30:31.215000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.4.release_date", "linked_record": true}, {"timestamp": "2026-01-28T19:30:31.354Z", "date_only": false, "value": "2026-01-28T19:30:31.354000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.5.release_date", "linked_record": true}, {"timestamp": "2026-01-28T20:01:39.965Z", "date_only": false, "value": "2026-01-28T20:01:39.965024+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.5.discovery_date", "linked_record": true}, {"timestamp": "2026-01-28T20:01:42.791Z", "date_only": false, "value": "2026-01-28T20:01:42.791305+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.4.discovery_date", "linked_record": true}, {"timestamp": "2026-02-03T21:21:40.268Z", "date_only": false, "value": "2026-02-03T21:21:40.268000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.27.release_date", "linked_record": true}, {"timestamp": "2026-02-03T22:01:19.884Z", "date_only": false, "value": "2026-02-03T22:01:19.884891+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.27.discovery_date", "linked_record": true}, {"timestamp": "2026-02-09T20:11:22.374Z", "date_only": false, "value": "2026-02-09T20:11:22.374000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.28.release_date", "linked_record": true}, {"timestamp": "2026-02-09T21:00:49.280Z", "date_only": false, "value": "2026-02-09T21:00:49.280114+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.28.discovery_date", "linked_record": true}, {"timestamp": "2026-02-10T21:42:56.471Z", "date_only": false, "value": "2026-02-10T21:42:56.471000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.31.release_date", "linked_record": true}, {"timestamp": "2026-02-10T22:01:01.036Z", "date_only": false, "value": "2026-02-10T22:01:01.036116+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.31.discovery_date", "linked_record": true}, {"timestamp": "2026-02-11T20:53:52.524Z", "date_only": false, "value": "2026-02-11T20:53:52.524000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.30.release_date", "linked_record": true}, {"timestamp": "2026-02-11T21:05:39.535Z", "date_only": false, "value": "2026-02-11T21:05:39.535631+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.30.discovery_date", "linked_record": true}, {"timestamp": "2026-02-18T17:45:17.573Z", "date_only": false, "value": "2026-02-18T17:45:17.573000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.3.release_date", "linked_record": true}, {"timestamp": "2026-02-18T19:03:28.564Z", "date_only": false, "value": "2026-02-18T19:03:28.564667+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.3.discovery_date", "linked_record": true}, {"timestamp": "2026-02-20T03:05:21.105Z", "date_only": false, "value": "2026-02-20T03:05:21.105000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.32.release_date", "linked_record": true}, {"timestamp": "2026-02-20T04:01:11.896Z", "date_only": false, "value": "2026-02-20T04:01:11.896063+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.32.discovery_date", "linked_record": true}, {"timestamp": "2026-02-20T19:29:12.162Z", "date_only": false, "value": "2026-02-20T19:29:12.162000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.17.release_date", "linked_record": true}, {"timestamp": "2026-02-20T20:03:43.567Z", "date_only": false, "value": "2026-02-20T20:03:43.567562+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.17.discovery_date", "linked_record": true}, {"timestamp": "2026-02-20T22:22:54.392Z", "date_only": false, "value": "2026-02-20T22:22:54.392000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.18.release_date", "linked_record": true}, {"timestamp": "2026-02-20T23:01:06.860Z", "date_only": false, "value": "2026-02-20T23:01:06.860908+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.18.discovery_date", "linked_record": true}, {"timestamp": "2026-02-25T02:45:37.543Z", "date_only": false, "value": "2026-02-25T02:45:37.543000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.34.release_date", "linked_record": true}, {"timestamp": "2026-02-25T04:02:09.864Z", "date_only": false, "value": "2026-02-25T04:02:09.864561+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.34.discovery_date", "linked_record": true}, {"timestamp": "2026-02-26T00:42:00.542Z", "date_only": false, "value": "2026-02-26T00:42:00.542000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.35.release_date", "linked_record": true}, {"timestamp": "2026-02-26T01:01:24.460Z", "date_only": false, "value": "2026-02-26T01:01:24.460651+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.35.discovery_date", "linked_record": true}, {"timestamp": "2026-02-26T01:07:42.693Z", "date_only": false, "value": "2026-02-26T01:07:42.693000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.36.release_date", "linked_record": true}, {"timestamp": "2026-02-26T01:45:45.668Z", "date_only": false, "value": "2026-02-26T01:45:45.668000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.37.release_date", "linked_record": true}, {"timestamp": "2026-02-26T02:01:23.004Z", "date_only": false, "value": "2026-02-26T02:01:23.004531+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.36.discovery_date", "linked_record": true}, {"timestamp": "2026-02-26T03:01:14.695Z", "date_only": false, "value": "2026-02-26T03:01:14.695334+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.37.discovery_date", "linked_record": true}, {"timestamp": "2026-03-04T18:25:30.240Z", "date_only": false, "value": "2026-03-04T18:25:30.240000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.15.release_date", "linked_record": true}, {"timestamp": "2026-03-04T19:01:01.620Z", "date_only": false, "value": "2026-03-04T19:01:01.620664+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.15.discovery_date", "linked_record": true}, {"timestamp": "2026-03-05T00:00:00Z", "date_only": false, "value": "2026-03-05T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.13.release_date", "linked_record": true}, {"timestamp": "2026-03-05T09:39:01.315Z", "date_only": false, "value": "2026-03-05T09:39:01.315000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:8509", "record": "RHSA-2026:8509", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2026-03-05T11:00:57.250Z", "date_only": false, "value": "2026-03-05T11:00:57.250283+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:8509", "record": "RHSA-2026:8509", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2026-03-05T16:01:10.432Z", "date_only": false, "value": "2026-03-05T16:01:10.432461+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.13.discovery_date", "linked_record": true}, {"timestamp": "2026-03-06T21:28:13.748Z", "date_only": false, "value": "2026-03-06T21:28:13.748000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.33.release_date", "linked_record": true}, {"timestamp": "2026-03-06T21:28:14.211Z", "date_only": false, "value": "2026-03-06T21:28:14.211000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.29.release_date", "linked_record": true}, {"timestamp": "2026-03-06T22:01:38.859Z", "date_only": false, "value": "2026-03-06T22:01:38.859733+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.33.discovery_date", "linked_record": true}, {"timestamp": "2026-03-06T22:02:11.567Z", "date_only": false, "value": "2026-03-06T22:02:11.567841+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.29.discovery_date", "linked_record": true}, {"timestamp": "2026-03-07T00:00:00Z", "date_only": true, "value": "2026-03-07", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0251", "record": "CERTFR-2026-AVI-0251", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-03-07T08:16:07Z", "date_only": false, "value": "2026-03-07T08:16:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-24281", "record": "CVE-2026-24281", "field": "creation_timestamp", "uuid": "0276381e-39ed-46b7-af24-b54429924e22", "url": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-24281"}, {"timestamp": "2026-03-07T08:50:32.525Z", "date_only": false, "value": "2026-03-07T08:50:32.525Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-24281", "field": "containers.adp.2.datePublic"}, {"timestamp": "2026-03-07T08:50:32.525Z", "date_only": false, "value": "2026-03-07T08:50:32.525Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-24281", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-03-07T08:50:32.525Z", "date_only": false, "value": "2026-03-07T08:50:32.525000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.23.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-03-07T08:50:32.525Z", "date_only": false, "value": "2026-03-07T08:50:32.525000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:14272", "record": "RHSA-2026:14272", "field": "vulnerabilities.4.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-03-07T08:50:32.525Z", "date_only": false, "value": "2026-03-07T08:50:32.525000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:14276", "record": "RHSA-2026:14276", "field": "vulnerabilities.3.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-03-07T08:50:32.525Z", "date_only": false, "value": "2026-03-07T08:50:32.525000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:19678", "record": "RHSA-2026:19678", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-03-07T08:50:32.525Z", "date_only": false, "value": "2026-03-07T08:50:32.525000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.7.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-03-07T08:50:32.525Z", "date_only": false, "value": "2026-03-07T08:50:32.525000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:8509", "record": "RHSA-2026:8509", "field": "vulnerabilities.1.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-03-07T08:50:32.525Z", "date_only": false, "value": "2026-03-07T08:50:32.525Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-24281", "field": "containers.adp.2.timeline.1.time", "text": "Made public."}, {"timestamp": "2026-03-07T08:50:32.525Z", "date_only": false, "value": "2026-03-07T08:50:32.525Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2026-24281", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-07T08:51:17.567Z", "date_only": false, "value": "2026-03-07T08:51:17.567000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.24.release_date", "linked_record": true}, {"timestamp": "2026-03-07T08:51:17.567Z", "date_only": false, "value": "2026-03-07T08:51:17.567000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:14272", "record": "RHSA-2026:14272", "field": "vulnerabilities.5.release_date", "linked_record": true}, {"timestamp": "2026-03-07T08:51:17.567Z", "date_only": false, "value": "2026-03-07T08:51:17.567000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:14276", "record": "RHSA-2026:14276", "field": "vulnerabilities.4.release_date", "linked_record": true}, {"timestamp": "2026-03-07T08:51:17.567Z", "date_only": false, "value": "2026-03-07T08:51:17.567000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:19678", "record": "RHSA-2026:19678", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2026-03-07T08:51:17.567Z", "date_only": false, "value": "2026-03-07T08:51:17.567000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.8.release_date", "linked_record": true}, {"timestamp": "2026-03-07T08:51:17.567Z", "date_only": false, "value": "2026-03-07T08:51:17.567000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:8509", "record": "RHSA-2026:8509", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2026-03-07T09:00:57.868Z", "date_only": false, "value": "2026-03-07T09:00:57.868082+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.23.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-03-07T09:00:57.868Z", "date_only": false, "value": "2026-03-07T09:00:57.868082+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:14272", "record": "RHSA-2026:14272", "field": "vulnerabilities.4.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-03-07T09:00:57.868Z", "date_only": false, "value": "2026-03-07T09:00:57.868082+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:14276", "record": "RHSA-2026:14276", "field": "vulnerabilities.3.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-03-07T09:00:57.868Z", "date_only": false, "value": "2026-03-07T09:00:57.868082+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:19678", "record": "RHSA-2026:19678", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-03-07T09:00:57.868Z", "date_only": false, "value": "2026-03-07T09:00:57.868082+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.7.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-03-07T09:00:57.868Z", "date_only": false, "value": "2026-03-07T09:00:57.868082+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:8509", "record": "RHSA-2026:8509", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-03-07T09:00:57.868Z", "date_only": false, "value": "2026-03-07T09:00:57.868Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-24281", "field": "containers.adp.2.timeline.0.time", "text": "Reported to Red Hat."}, {"timestamp": "2026-03-07T09:01:03.859Z", "date_only": false, "value": "2026-03-07T09:01:03.859129+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.24.discovery_date", "linked_record": true}, {"timestamp": "2026-03-07T09:01:03.859Z", "date_only": false, "value": "2026-03-07T09:01:03.859129+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:14272", "record": "RHSA-2026:14272", "field": "vulnerabilities.5.discovery_date", "linked_record": true}, {"timestamp": "2026-03-07T09:01:03.859Z", "date_only": false, "value": "2026-03-07T09:01:03.859129+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:14276", "record": "RHSA-2026:14276", "field": "vulnerabilities.4.discovery_date", "linked_record": true}, {"timestamp": "2026-03-07T09:01:03.859Z", "date_only": false, "value": "2026-03-07T09:01:03.859129+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:19678", "record": "RHSA-2026:19678", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2026-03-07T09:01:03.859Z", "date_only": false, "value": "2026-03-07T09:01:03.859129+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.8.discovery_date", "linked_record": true}, {"timestamp": "2026-03-07T09:01:03.859Z", "date_only": false, "value": "2026-03-07T09:01:03.859129+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:8509", "record": "RHSA-2026:8509", "field": "vulnerabilities.2.discovery_date", "linked_record": true}, {"timestamp": "2026-03-07T09:16:00Z", "date_only": false, "value": "2026-03-07T09:16:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-24281", "record": "UBUNTU-CVE-2026-24281", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-03-07T09:16:07Z", "date_only": false, "value": "2026-03-07T09:16:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7XRH-HQFC-G7QR", "record": "GHSA-7XRH-HQFC-G7QR", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-03-07T09:16:07.437Z", "date_only": false, "value": "2026-03-07T09:16:07.437", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-24281", "record": "FKIE_CVE-2026-24281", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-03-07T09:30:15Z", "date_only": false, "value": "2026-03-07T09:30:15Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7XRH-HQFC-G7QR", "record": "GHSA-7XRH-HQFC-G7QR", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-03-07T12:54:55.875Z", "date_only": false, "value": "2026-03-07T12:54:55.875244Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mghuqlza3v2x", "record": "CVE-2026-24281", "field": "creation_timestamp", "uuid": "b285ded0-3f0f-4638-b3d5-bc0fa8206fdc", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mghuqlza3v2x"}, {"timestamp": "2026-03-07T17:05:10.486Z", "date_only": false, "value": "2026-03-07T17:05:10.486Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2026-24281", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-09T00:00:00Z", "date_only": false, "value": "2026-03-09T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0251", "record": "CERTFR-2026-AVI-0251", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-03-09T00:00:00Z", "date_only": false, "value": "2026-03-09T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0251", "record": "CERTFR-2026-AVI-0251", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-03-09T00:00:00Z", "date_only": false, "value": "2026-03-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0251", "record": "CERTFR-2026-AVI-0251", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-03-09T00:00:00Z", "date_only": false, "value": "2026-03-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0251/", "record": "CVE-2026-24281", "field": "creation_timestamp", "uuid": "86724551-cdb9-472e-a36f-a17d5a202a0a", "url": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0251/"}, {"timestamp": "2026-03-09T19:19:09.464Z", "date_only": false, "value": "2026-03-09T19:19:09.464000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.14.release_date", "linked_record": true}, {"timestamp": "2026-03-09T20:01:29.643Z", "date_only": false, "value": "2026-03-09T20:01:29.643462+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.14.discovery_date", "linked_record": true}, {"timestamp": "2026-03-10T08:52:16.699Z", "date_only": false, "value": "2026-03-10T08:52:16.699Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-ZOOKEEPER-2026-24281", "record": "BIT-ZOOKEEPER-2026-24281", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-03-10T17:36:42.765Z", "date_only": false, "value": "2026-03-10T17:36:42.765646Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-24281", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2026-03-10T17:36:42.765Z", "date_only": false, "value": "2026-03-10T17:36:42.765646Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-24281", "record": "FKIE_CVE-2026-24281", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-03-10T17:37:28.087Z", "date_only": false, "value": "2026-03-10T17:37:28.087Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-24281", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-10T19:32:52Z", "date_only": false, "value": "2026-03-10T19:32:52Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7XRH-HQFC-G7QR", "record": "GHSA-7XRH-HQFC-G7QR", "field": "modified", "linked_record": true}, {"timestamp": "2026-03-10T21:57:44.387Z", "date_only": false, "value": "2026-03-10T21:57:44.387000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.41.release_date", "linked_record": true}, {"timestamp": "2026-03-10T23:02:58.238Z", "date_only": false, "value": "2026-03-10T23:02:58.238399+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.41.discovery_date", "linked_record": true}, {"timestamp": "2026-03-11T15:37:47.338Z", "date_only": false, "value": "2026-03-11T15:37:47.338000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.38.release_date", "linked_record": true}, {"timestamp": "2026-03-11T15:41:14.376Z", "date_only": false, "value": "2026-03-11T15:41:14.376000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.42.release_date", "linked_record": true}, {"timestamp": "2026-03-11T16:01:02.960Z", "date_only": false, "value": "2026-03-11T16:01:02.960777+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.38.discovery_date", "linked_record": true}, {"timestamp": "2026-03-11T16:01:11.139Z", "date_only": false, "value": "2026-03-11T16:01:11.139923+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.42.discovery_date", "linked_record": true}, {"timestamp": "2026-03-11T19:27:23.380Z", "date_only": false, "value": "2026-03-11T19:27:23.380000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.43.release_date", "linked_record": true}, {"timestamp": "2026-03-11T20:02:00.687Z", "date_only": false, "value": "2026-03-11T20:02:00.687153+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.43.discovery_date", "linked_record": true}, {"timestamp": "2026-03-12T16:45:01.070Z", "date_only": false, "value": "2026-03-12T16:45:01.070000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.39.release_date", "linked_record": true}, {"timestamp": "2026-03-12T18:01:57.290Z", "date_only": false, "value": "2026-03-12T18:01:57.290176+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.39.discovery_date", "linked_record": true}, {"timestamp": "2026-03-12T19:47:07.464Z", "date_only": false, "value": "2026-03-12T19:47:07.464000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.44.release_date", "linked_record": true}, {"timestamp": "2026-03-12T20:01:22.957Z", "date_only": false, "value": "2026-03-12T20:01:22.957558+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.44.discovery_date", "linked_record": true}, {"timestamp": "2026-03-12T21:41:50.427Z", "date_only": false, "value": "2026-03-12T21:41:50.427000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.45.release_date", "linked_record": true}, {"timestamp": "2026-03-12T22:01:29.967Z", "date_only": false, "value": "2026-03-12T22:01:29.967713+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.45.discovery_date", "linked_record": true}, {"timestamp": "2026-03-13T21:03:53.435Z", "date_only": false, "value": "2026-03-13T21:03:53.435000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.46.release_date", "linked_record": true}, {"timestamp": "2026-03-13T22:02:17.336Z", "date_only": false, "value": "2026-03-13T22:02:17.336115+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.46.discovery_date", "linked_record": true}, {"timestamp": "2026-03-18T00:23:34.862Z", "date_only": false, "value": "2026-03-18T00:23:34.862000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.9.release_date", "linked_record": true}, {"timestamp": "2026-03-18T01:01:36.393Z", "date_only": false, "value": "2026-03-18T01:01:36.393672+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.9.discovery_date", "linked_record": true}, {"timestamp": "2026-03-18T02:29:45.857Z", "date_only": false, "value": "2026-03-18T02:29:45.857000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.40.release_date", "linked_record": true}, {"timestamp": "2026-03-18T04:02:45.401Z", "date_only": false, "value": "2026-03-18T04:02:45.401296+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.40.discovery_date", "linked_record": true}, {"timestamp": "2026-03-20T22:47:10.308Z", "date_only": false, "value": "2026-03-20T22:47:10.308000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.47.release_date", "linked_record": true}, {"timestamp": "2026-03-20T23:01:51.656Z", "date_only": false, "value": "2026-03-20T23:01:51.656938+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.47.discovery_date", "linked_record": true}, {"timestamp": "2026-03-24T07:53:44.644Z", "date_only": false, "value": "2026-03-24T07:53:44.644000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:8509", "record": "RHSA-2026:8509", "field": "vulnerabilities.3.release_date", "linked_record": true}, {"timestamp": "2026-03-24T09:01:25.210Z", "date_only": false, "value": "2026-03-24T09:01:25.210390+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:8509", "record": "RHSA-2026:8509", "field": "vulnerabilities.3.discovery_date", "linked_record": true}, {"timestamp": "2026-03-27T19:54:15.586Z", "date_only": false, "value": "2026-03-27T19:54:15.586000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.48.release_date", "linked_record": true}, {"timestamp": "2026-03-27T19:54:15.586Z", "date_only": false, "value": "2026-03-27T19:54:15.586000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:14272", "record": "RHSA-2026:14272", "field": "vulnerabilities.6.release_date", "linked_record": true}, {"timestamp": "2026-03-27T19:54:15.586Z", "date_only": false, "value": "2026-03-27T19:54:15.586000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:14276", "record": "RHSA-2026:14276", "field": "vulnerabilities.5.release_date", "linked_record": true}, {"timestamp": "2026-03-27T19:54:15.586Z", "date_only": false, "value": "2026-03-27T19:54:15.586000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.10.release_date", "linked_record": true}, {"timestamp": "2026-03-27T19:54:15.586Z", "date_only": false, "value": "2026-03-27T19:54:15.586000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:8509", "record": "RHSA-2026:8509", "field": "vulnerabilities.4.release_date", "linked_record": true}, {"timestamp": "2026-03-27T19:55:23.135Z", "date_only": false, "value": "2026-03-27T19:55:23.135000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.49.release_date", "linked_record": true}, {"timestamp": "2026-03-27T19:55:23.135Z", "date_only": false, "value": "2026-03-27T19:55:23.135000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:14272", "record": "RHSA-2026:14272", "field": "vulnerabilities.7.release_date", "linked_record": true}, {"timestamp": "2026-03-27T19:55:23.135Z", "date_only": false, "value": "2026-03-27T19:55:23.135000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:14276", "record": "RHSA-2026:14276", "field": "vulnerabilities.6.release_date", "linked_record": true}, {"timestamp": "2026-03-27T19:55:23.135Z", "date_only": false, "value": "2026-03-27T19:55:23.135000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:19678", "record": "RHSA-2026:19678", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2026-03-27T19:55:23.135Z", "date_only": false, "value": "2026-03-27T19:55:23.135000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.11.release_date", "linked_record": true}, {"timestamp": "2026-03-27T19:55:23.135Z", "date_only": false, "value": "2026-03-27T19:55:23.135000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:8509", "record": "RHSA-2026:8509", "field": "vulnerabilities.5.release_date", "linked_record": true}, {"timestamp": "2026-03-27T21:01:59.865Z", "date_only": false, "value": "2026-03-27T21:01:59.865839+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.48.discovery_date", "linked_record": true}, {"timestamp": "2026-03-27T21:01:59.865Z", "date_only": false, "value": "2026-03-27T21:01:59.865839+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:14272", "record": "RHSA-2026:14272", "field": "vulnerabilities.6.discovery_date", "linked_record": true}, {"timestamp": "2026-03-27T21:01:59.865Z", "date_only": false, "value": "2026-03-27T21:01:59.865839+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:14276", "record": "RHSA-2026:14276", "field": "vulnerabilities.5.discovery_date", "linked_record": true}, {"timestamp": "2026-03-27T21:01:59.865Z", "date_only": false, "value": "2026-03-27T21:01:59.865839+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.10.discovery_date", "linked_record": true}, {"timestamp": "2026-03-27T21:01:59.865Z", "date_only": false, "value": "2026-03-27T21:01:59.865839+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:8509", "record": "RHSA-2026:8509", "field": "vulnerabilities.4.discovery_date", "linked_record": true}, {"timestamp": "2026-03-27T21:02:13.396Z", "date_only": false, "value": "2026-03-27T21:02:13.396015+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.49.discovery_date", "linked_record": true}, {"timestamp": "2026-03-27T21:02:13.396Z", "date_only": false, "value": "2026-03-27T21:02:13.396015+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:14272", "record": "RHSA-2026:14272", "field": "vulnerabilities.7.discovery_date", "linked_record": true}, {"timestamp": "2026-03-27T21:02:13.396Z", "date_only": false, "value": "2026-03-27T21:02:13.396015+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:14276", "record": "RHSA-2026:14276", "field": "vulnerabilities.6.discovery_date", "linked_record": true}, {"timestamp": "2026-03-27T21:02:13.396Z", "date_only": false, "value": "2026-03-27T21:02:13.396015+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:19678", "record": "RHSA-2026:19678", "field": "vulnerabilities.2.discovery_date", "linked_record": true}, {"timestamp": "2026-03-27T21:02:13.396Z", "date_only": false, "value": "2026-03-27T21:02:13.396015+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.11.discovery_date", "linked_record": true}, {"timestamp": "2026-03-27T21:02:13.396Z", "date_only": false, "value": "2026-03-27T21:02:13.396015+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:8509", "record": "RHSA-2026:8509", "field": "vulnerabilities.5.discovery_date", "linked_record": true}, {"timestamp": "2026-03-31T19:25:55.987Z", "date_only": false, "value": "2026-03-31T19:25:55.987000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.4.release_date", "linked_record": true}, {"timestamp": "2026-03-31T20:01:21.918Z", "date_only": false, "value": "2026-03-31T20:01:21.918257+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.4.discovery_date", "linked_record": true}, {"timestamp": "2026-04-01T09:49:35.155Z", "date_only": false, "value": "2026-04-01T09:49:35.155892Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-JK47870", "record": "CLEANSTART-2026-JK47870", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-03T12:20:27.331Z", "date_only": false, "value": "2026-04-03T12:20:27.331559Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3milpfswmfo2d", "record": "CVE-2026-24281", "field": "creation_timestamp", "uuid": "398d6865-a8c3-4d26-b7cc-d0f3ff75e3e4", "url": "https://bsky.app/profile/gcpweekly.bsky.social/post/3milpfswmfo2d"}, {"timestamp": "2026-04-03T18:20:32.327Z", "date_only": false, "value": "2026-04-03T18:20:32.327825Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mimdjp2iyn2y", "record": "CVE-2026-24281", "field": "creation_timestamp", "uuid": "97941e5a-63e2-4986-9c9d-4e653275776a", "url": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mimdjp2iyn2y"}, {"timestamp": "2026-04-08T22:00:00Z", "date_only": false, "value": "2026-04-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1032", "record": "WID-SEC-W-2026-1032", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-04-08T22:00:00Z", "date_only": false, "value": "2026-04-08T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1032", "record": "WID-SEC-W-2026-1032", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-08T22:00:00Z", "date_only": false, "value": "2026-04-08T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1032", "record": "WID-SEC-W-2026-1032", "field": "vulnerabilities.14.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-10T15:42:03.843Z", "date_only": false, "value": "2026-04-10T15:42:03.843000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.12.release_date", "linked_record": true}, {"timestamp": "2026-04-10T16:02:17.024Z", "date_only": false, "value": "2026-04-10T16:02:17.024798+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.12.discovery_date", "linked_record": true}, {"timestamp": "2026-04-13T13:26:46.572Z", "date_only": false, "value": "2026-04-13T13:26:46.572000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.13.discovery_date", "linked_record": true}, {"timestamp": "2026-04-14T10:59:10.193Z", "date_only": false, "value": "2026-04-14T10:59:10.193000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:14272", "record": "RHSA-2026:14272", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2026-04-14T12:01:05.768Z", "date_only": false, "value": "2026-04-14T12:01:05.768902+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:14272", "record": "RHSA-2026:14272", "field": "vulnerabilities.2.discovery_date", "linked_record": true}, {"timestamp": "2026-04-15T08:56:34.057Z", "date_only": false, "value": "2026-04-15T08:56:34.057000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:14272", "record": "RHSA-2026:14272", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2026-04-15T08:56:34.057Z", "date_only": false, "value": "2026-04-15T08:56:34.057000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:14276", "record": "RHSA-2026:14276", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2026-04-15T08:59:12.677Z", "date_only": false, "value": "2026-04-15T08:59:12.677000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:14272", "record": "RHSA-2026:14272", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2026-04-15T08:59:12.677Z", "date_only": false, "value": "2026-04-15T08:59:12.677000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:14276", "record": "RHSA-2026:14276", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2026-04-15T09:06:15.617Z", "date_only": false, "value": "2026-04-15T09:06:15.617000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:14272", "record": "RHSA-2026:14272", "field": "vulnerabilities.3.release_date", "linked_record": true}, {"timestamp": "2026-04-15T09:06:15.617Z", "date_only": false, "value": "2026-04-15T09:06:15.617000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:14276", "record": "RHSA-2026:14276", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2026-04-15T10:00:59.672Z", "date_only": false, "value": "2026-04-15T10:00:59.672015+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:14272", "record": "RHSA-2026:14272", "field": "vulnerabilities.3.discovery_date", "linked_record": true}, {"timestamp": "2026-04-15T10:00:59.672Z", "date_only": false, "value": "2026-04-15T10:00:59.672015+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:14276", "record": "RHSA-2026:14276", "field": "vulnerabilities.2.discovery_date", "linked_record": true}, {"timestamp": "2026-04-15T10:01:27.769Z", "date_only": false, "value": "2026-04-15T10:01:27.769752+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:14272", "record": "RHSA-2026:14272", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2026-04-15T10:01:27.769Z", "date_only": false, "value": "2026-04-15T10:01:27.769752+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:14276", "record": "RHSA-2026:14276", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2026-04-15T10:01:32.911Z", "date_only": false, "value": "2026-04-15T10:01:32.911938+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:14272", "record": "RHSA-2026:14272", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2026-04-15T10:01:32.911Z", "date_only": false, "value": "2026-04-15T10:01:32.911938+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:14276", "record": "RHSA-2026:14276", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2026-04-16T00:40:49.655Z", "date_only": false, "value": "2026-04-16T00:40:49.655378Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-EZ90321", "record": "CLEANSTART-2026-EZ90321", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-16T00:42:51.354Z", "date_only": false, "value": "2026-04-16T00:42:51.354420Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-CF62516", "record": "CLEANSTART-2026-CF62516", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-16T15:32:09Z", "date_only": false, "value": "2026-04-16T15:32:09+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:8509", "record": "RHSA-2026:8509", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-04-16T15:32:09Z", "date_only": false, "value": "2026-04-16T15:32:09+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:8509", "record": "RHSA-2026:8509", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-16T15:32:09Z", "date_only": false, "value": "2026-04-16T15:32:09+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:8509", "record": "RHSA-2026:8509", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-16T22:00:00Z", "date_only": false, "value": "2026-04-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1032", "record": "WID-SEC-W-2026-1032", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-04-22T00:39:59.241Z", "date_only": false, "value": "2026-04-22T00:39:59.241183Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-KB76878", "record": "CLEANSTART-2026-KB76878", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-23T00:39:55.461Z", "date_only": false, "value": "2026-04-23T00:39:55.461024Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-IS05941", "record": "CLEANSTART-2026-IS05941", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-23T14:53:58Z", "date_only": false, "value": "2026-04-23T14:53:58+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-04-23T14:53:58Z", "date_only": false, "value": "2026-04-23T14:53:58+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-23T14:53:58Z", "date_only": false, "value": "2026-04-23T14:53:58+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.23.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-23T14:54:32.426Z", "date_only": false, "value": "2026-04-23T14:54:32.426000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.14.release_date", "linked_record": true}, {"timestamp": "2026-04-23T16:04:41.751Z", "date_only": false, "value": "2026-04-23T16:04:41.751666+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.14.discovery_date", "linked_record": true}, {"timestamp": "2026-04-24T17:49:49.517Z", "date_only": false, "value": "2026-04-24T17:49:49.517000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.15.release_date", "linked_record": true}, {"timestamp": "2026-04-24T19:01:13.418Z", "date_only": false, "value": "2026-04-24T19:01:13.418725+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.15.discovery_date", "linked_record": true}, {"timestamp": "2026-04-30T00:36:57.162Z", "date_only": false, "value": "2026-04-30T00:36:57.162497Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-GN46454", "record": "CLEANSTART-2026-GN46454", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-30T00:39:26.941Z", "date_only": false, "value": "2026-04-30T00:39:26.941756Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-VN28553", "record": "CLEANSTART-2026-VN28553", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-30T00:49:27.156Z", "date_only": false, "value": "2026-04-30T00:49:27.156682Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-SR31778", "record": "CLEANSTART-2026-SR31778", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-04T00:00:00Z", "date_only": false, "value": "2026-05-04T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.13.release_date", "linked_record": true}, {"timestamp": "2026-05-06T00:00:00Z", "date_only": true, "value": "2026-05-06", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0556", "record": "CERTFR-2026-AVI-0556", "field": "vendor_advisories.1.published_at", "linked_record": true}, {"timestamp": "2026-05-06T09:55:12.531Z", "date_only": false, "value": "2026-05-06T09:55:12.531000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.5.release_date", "linked_record": true}, {"timestamp": "2026-05-06T10:01:43.929Z", "date_only": false, "value": "2026-05-06T10:01:43.929832+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.5.discovery_date", "linked_record": true}, {"timestamp": "2026-05-06T17:58:57Z", "date_only": false, "value": "2026-05-06T17:58:57+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:14272", "record": "RHSA-2026:14272", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-05-06T17:58:57Z", "date_only": false, "value": "2026-05-06T17:58:57+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:14272", "record": "RHSA-2026:14272", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-06T17:58:57Z", "date_only": false, "value": "2026-05-06T17:58:57+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:14272", "record": "RHSA-2026:14272", "field": "vulnerabilities.4.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-06T17:59:07Z", "date_only": false, "value": "2026-05-06T17:59:07+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:14276", "record": "RHSA-2026:14276", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-05-06T17:59:07Z", "date_only": false, "value": "2026-05-06T17:59:07+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:14276", "record": "RHSA-2026:14276", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-06T17:59:07Z", "date_only": false, "value": "2026-05-06T17:59:07+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:14276", "record": "RHSA-2026:14276", "field": "vulnerabilities.3.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-06T22:00:00Z", "date_only": false, "value": "2026-05-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1032", "record": "WID-SEC-W-2026-1032", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-05-07T00:00:00Z", "date_only": true, "value": "2026-05-07", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0556", "record": "CERTFR-2026-AVI-0556", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-05-08T00:00:00Z", "date_only": true, "value": "2026-05-08", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0556", "record": "CERTFR-2026-AVI-0556", "field": "vendor_advisories.6.published_at", "linked_record": true}, {"timestamp": "2026-05-11T00:00:00Z", "date_only": false, "value": "2026-05-11T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0556", "record": "CERTFR-2026-AVI-0556", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-05-11T00:00:00Z", "date_only": false, "value": "2026-05-11T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0556", "record": "CERTFR-2026-AVI-0556", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-11T00:00:00Z", "date_only": false, "value": "2026-05-11T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0556", "record": "CERTFR-2026-AVI-0556", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-05-13T16:48:16.218Z", "date_only": false, "value": "2026-05-13T16:48:16.218000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.19.release_date", "linked_record": true}, {"timestamp": "2026-05-13T16:54:39.455Z", "date_only": false, "value": "2026-05-13T16:54:39.455000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.21.release_date", "linked_record": true}, {"timestamp": "2026-05-13T16:56:06.008Z", "date_only": false, "value": "2026-05-13T16:56:06.008000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.20.release_date", "linked_record": true}, {"timestamp": "2026-05-13T17:00:02.786Z", "date_only": false, "value": "2026-05-13T17:00:02.786000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.22.release_date", "linked_record": true}, {"timestamp": "2026-05-13T17:01:38.942Z", "date_only": false, "value": "2026-05-13T17:01:38.942000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.23.release_date", "linked_record": true}, {"timestamp": "2026-05-13T17:04:28.388Z", "date_only": false, "value": "2026-05-13T17:04:28.388000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.24.release_date", "linked_record": true}, {"timestamp": "2026-05-13T17:11:07.275Z", "date_only": false, "value": "2026-05-13T17:11:07.275000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.26.release_date", "linked_record": true}, {"timestamp": "2026-05-13T18:01:13.729Z", "date_only": false, "value": "2026-05-13T18:01:13.729805+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.23.discovery_date", "linked_record": true}, {"timestamp": "2026-05-13T18:01:17.168Z", "date_only": false, "value": "2026-05-13T18:01:17.168356+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.21.discovery_date", "linked_record": true}, {"timestamp": "2026-05-13T18:01:23.402Z", "date_only": false, "value": "2026-05-13T18:01:23.402405+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.26.discovery_date", "linked_record": true}, {"timestamp": "2026-05-13T18:01:32.406Z", "date_only": false, "value": "2026-05-13T18:01:32.406247+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.24.discovery_date", "linked_record": true}, {"timestamp": "2026-05-13T18:01:35.713Z", "date_only": false, "value": "2026-05-13T18:01:35.713847+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.22.discovery_date", "linked_record": true}, {"timestamp": "2026-05-13T18:01:50.343Z", "date_only": false, "value": "2026-05-13T18:01:50.343509+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.19.discovery_date", "linked_record": true}, {"timestamp": "2026-05-13T18:02:21.088Z", "date_only": false, "value": "2026-05-13T18:02:21.088167+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.20.discovery_date", "linked_record": true}, {"timestamp": "2026-05-13T18:09:19.817Z", "date_only": false, "value": "2026-05-13T18:09:19.817000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.16.release_date", "linked_record": true}, {"timestamp": "2026-05-13T18:22:21.699Z", "date_only": false, "value": "2026-05-13T18:22:21.699000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.17.release_date", "linked_record": true}, {"timestamp": "2026-05-13T19:01:32.498Z", "date_only": false, "value": "2026-05-13T19:01:32.498598+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.16.discovery_date", "linked_record": true}, {"timestamp": "2026-05-13T19:01:35.415Z", "date_only": false, "value": "2026-05-13T19:01:35.415881+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.17.discovery_date", "linked_record": true}, {"timestamp": "2026-05-15T00:00:00Z", "date_only": true, "value": "2026-05-15", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0641", "record": "CERTFR-2026-AVI-0641", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-05-17T00:00:00Z", "date_only": true, "value": "2026-05-17", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0641", "record": "CERTFR-2026-AVI-0641", "field": "vendor_advisories.6.published_at", "linked_record": true}, {"timestamp": "2026-05-18T00:00:00Z", "date_only": true, "value": "2026-05-18", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0641", "record": "CERTFR-2026-AVI-0641", "field": "vendor_advisories.1.published_at", "linked_record": true}, {"timestamp": "2026-05-18T12:57:06.562Z", "date_only": false, "value": "2026-05-18T12:57:06.562671Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-KV09488", "record": "CLEANSTART-2026-KV09488", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-18T13:03:35.398Z", "date_only": false, "value": "2026-05-18T13:03:35.398666Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-AO61361", "record": "CLEANSTART-2026-AO61361", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-18T13:10:38.939Z", "date_only": false, "value": "2026-05-18T13:10:38.939090Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-SV95049", "record": "CLEANSTART-2026-SV95049", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-18T13:11:22.641Z", "date_only": false, "value": "2026-05-18T13:11:22.641566Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-JU62349", "record": "CLEANSTART-2026-JU62349", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-18T13:11:46.835Z", "date_only": false, "value": "2026-05-18T13:11:46.835215Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-SQ91016", "record": "CLEANSTART-2026-SQ91016", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-18T13:11:47.355Z", "date_only": false, "value": "2026-05-18T13:11:47.355078Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-WK99982", "record": "CLEANSTART-2026-WK99982", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-18T13:14:55.663Z", "date_only": false, "value": "2026-05-18T13:14:55.663650Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-LO22603", "record": "CLEANSTART-2026-LO22603", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-18T13:20:53.787Z", "date_only": false, "value": "2026-05-18T13:20:53.787724Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-RD06185", "record": "CLEANSTART-2026-RD06185", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-18T13:41:59.294Z", "date_only": false, "value": "2026-05-18T13:41:59.294027Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-DY69070", "record": "CLEANSTART-2026-DY69070", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-18T13:42:30.947Z", "date_only": false, "value": "2026-05-18T13:42:30.947275Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-TK07726", "record": "CLEANSTART-2026-TK07726", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-18T13:42:38.953Z", "date_only": false, "value": "2026-05-18T13:42:38.953146Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-AV84730", "record": "CLEANSTART-2026-AV84730", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-18T14:01:44Z", "date_only": false, "value": "2026-05-18T14:01:44Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-TC39210", "record": "CLEANSTART-2026-TC39210", "field": "modified", "linked_record": true}, {"timestamp": "2026-05-19T00:00:00Z", "date_only": true, "value": "2026-05-19", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0641", "record": "CERTFR-2026-AVI-0641", "field": "vendor_advisories.4.published_at", "linked_record": true}, {"timestamp": "2026-05-20T13:12:03Z", "date_only": false, "value": "2026-05-20T13:12:03+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:19678", "record": "RHSA-2026:19678", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-05-20T13:12:03Z", "date_only": false, "value": "2026-05-20T13:12:03+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:19678", "record": "RHSA-2026:19678", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-20T13:12:03Z", "date_only": false, "value": "2026-05-20T13:12:03+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:19678", "record": "RHSA-2026:19678", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": true, "value": "2026-05-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0641", "record": "CERTFR-2026-AVI-0641", "field": "vendor_advisories.10.published_at", "linked_record": true}, {"timestamp": "2026-05-22T00:00:00Z", "date_only": false, "value": "2026-05-22T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0641", "record": "CERTFR-2026-AVI-0641", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-05-22T00:00:00Z", "date_only": false, "value": "2026-05-22T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0641", "record": "CERTFR-2026-AVI-0641", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-22T00:00:00Z", "date_only": false, "value": "2026-05-22T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0641", "record": "CERTFR-2026-AVI-0641", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-06-07T22:00:00Z", "date_only": false, "value": "2026-06-07T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1032", "record": "WID-SEC-W-2026-1032", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-06-07T22:00:00Z", "date_only": false, "value": "2026-06-07T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1032", "record": "WID-SEC-W-2026-1032", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-06-08T09:28:17.276Z", "date_only": false, "value": "2026-06-08T09:28:17.276+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1032", "record": "WID-SEC-W-2026-1032", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-06-09T03:46:54.131Z", "date_only": false, "value": "2026-06-09T03:46:54.131000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:70421", "record": "RHSA-2026:70421", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2026-06-09T03:47:46.447Z", "date_only": false, "value": "2026-06-09T03:47:46.447000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:70421", "record": "RHSA-2026:70421", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2026-06-09T05:00:52.290Z", "date_only": false, "value": "2026-06-09T05:00:52.290020+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:70421", "record": "RHSA-2026:70421", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2026-06-09T05:01:51.700Z", "date_only": false, "value": "2026-06-09T05:01:51.700197+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:70421", "record": "RHSA-2026:70421", "field": "vulnerabilities.2.discovery_date", "linked_record": true}, {"timestamp": "2026-06-09T10:55:32.426Z", "date_only": false, "value": "2026-06-09T10:55:32.426000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.33.discovery_date", "linked_record": true}, {"timestamp": "2026-06-11T20:46:14.110Z", "date_only": false, "value": "2026-06-11T20:46:14.110000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.18.release_date", "linked_record": true}, {"timestamp": "2026-06-11T22:02:05.327Z", "date_only": false, "value": "2026-06-11T22:02:05.327173+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.18.discovery_date", "linked_record": true}, {"timestamp": "2026-06-12T14:00:25.801Z", "date_only": false, "value": "2026-06-12T14:00:25.801000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.25.release_date", "linked_record": true}, {"timestamp": "2026-06-12T14:10:05.585Z", "date_only": false, "value": "2026-06-12T14:10:05.585000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.27.release_date", "linked_record": true}, {"timestamp": "2026-06-12T14:17:50.203Z", "date_only": false, "value": "2026-06-12T14:17:50.203000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.28.release_date", "linked_record": true}, {"timestamp": "2026-06-12T14:33:16.595Z", "date_only": false, "value": "2026-06-12T14:33:16.595000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.29.release_date", "linked_record": true}, {"timestamp": "2026-06-12T14:39:52.498Z", "date_only": false, "value": "2026-06-12T14:39:52.498000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.30.release_date", "linked_record": true}, {"timestamp": "2026-06-12T14:42:44.677Z", "date_only": false, "value": "2026-06-12T14:42:44.677000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.31.release_date", "linked_record": true}, {"timestamp": "2026-06-12T14:50:43.151Z", "date_only": false, "value": "2026-06-12T14:50:43.151000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.32.release_date", "linked_record": true}, {"timestamp": "2026-06-12T15:01:18.066Z", "date_only": false, "value": "2026-06-12T15:01:18.066312+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.25.discovery_date", "linked_record": true}, {"timestamp": "2026-06-12T15:01:45.671Z", "date_only": false, "value": "2026-06-12T15:01:45.671884+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.27.discovery_date", "linked_record": true}, {"timestamp": "2026-06-12T15:02:15.565Z", "date_only": false, "value": "2026-06-12T15:02:15.565158+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.28.discovery_date", "linked_record": true}, {"timestamp": "2026-06-12T16:02:13.735Z", "date_only": false, "value": "2026-06-12T16:02:13.735675+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.32.discovery_date", "linked_record": true}, {"timestamp": "2026-06-12T16:02:40.032Z", "date_only": false, "value": "2026-06-12T16:02:40.032749+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.31.discovery_date", "linked_record": true}, {"timestamp": "2026-06-12T16:02:45.855Z", "date_only": false, "value": "2026-06-12T16:02:45.855856+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.29.discovery_date", "linked_record": true}, {"timestamp": "2026-06-12T16:02:56.371Z", "date_only": false, "value": "2026-06-12T16:02:56.371830+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.30.discovery_date", "linked_record": true}, {"timestamp": "2026-06-17T00:00:00Z", "date_only": false, "value": "2026-06-17T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.33.release_date", "linked_record": true}, {"timestamp": "2026-06-18T19:11:29Z", "date_only": false, "value": "2026-06-18T19:11:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ppkarwasz/f5be1b5c0182fe665252101c5f24d39f", "record": "CVE-2026-24281", "field": "creation_timestamp", "uuid": "49318501-b59b-4d8b-b98d-a811f90a8924", "content": "# Apache ZooKeeper \u2014 Threat Model\n\n> Produced with the `threat-model-producer` skill\n> ().\n> This is the implicit contract between ZooKeeper and its downstream\n> operators/integrators: what is in scope, what is out, what the project\n> claims, and what it disclaims. It is **not** an audit, a CVE list, or a\n> secure-coding guide.\n\n## \u00a71 Header\n\n- **Project**: Apache ZooKeeper (server + Java client + Jute serialization).\n- **Version / commit**: `3.10.0-SNAPSHOT`, commit `9b535738d` (branch `fix/4820_change_logback_scope`).\n- **Date**: 2026-06-18.\n- **Author(s)**: Draft generated for maintainer review. Not yet ratified.\n- **Status**: **DRAFT \u2014 not yet reviewed by the ZooKeeper PMC.** Heavily `(inferred)`; treat \u00a78/\u00a79 boundaries as proposals until confirmed.\n- **Version binding**: A report against ZooKeeper version *N* is triaged against this model as it stood at *N*, not at HEAD. Defaults change between minor releases (e.g. `fips-mode` flipped default between 3.8.x and 3.9.0); always read the row for the reported version.\n- **Reporting cross-reference**: Findings that violate a \u00a78 claimed property should be reported privately to `security@zookeeper.apache.org` per  *(documented)*. Findings that fall under \u00a73 (out of scope) or \u00a79 (disclaimed) will be closed citing this document.\n- **Provenance legend**:\n  - *(documented)* \u2014 stated in ZooKeeper's own docs (Admin/Programmer guides, Reconfig guide, security page) or directly in code. Cited.\n  - *(maintainer)* \u2014 stated by a maintainer in response to this process. **None yet** (draft-first).\n  - *(inferred)* \u2014 reasoned from code structure or domain knowledge; has a matching \u00a714 open question.\n- **Draft confidence**: ~58 documented / 0 maintainer / ~22 inferred. This is a public-artifact draft; the `(inferred)` claims in \u00a73, \u00a75, \u00a77, \u00a79 are the priority confirmation targets.\n- **What ZooKeeper is**: A distributed coordination service. A small ensemble of servers (typically 3/5/7) replicates a hierarchical key/value namespace (the \"data tree\" of *znodes*) using the ZAB atomic-broadcast protocol, and serves reads, writes, watches, and ephemeral/sequential nodes to many client applications. It is the coordination backbone for systems like Kafka, HBase, and Solr \u2014 used for leader election, configuration, locks, and membership. It is a stateful network service, not an in-process library.\n\n## \u00a72 Scope and intended use\n\n- **Primary intended use**: An in-datacenter, operator-deployed coordination ensemble accessed by trusted application processes over a low-latency network. Concrete uses: configuration storage, distributed locks, leader election, group membership, service discovery.\n- **Deployment context**: Long-running server (`QuorumPeerMain` / `ZooKeeperServerMain`) plus an embedded Java client library. *(documented: zookeeperAdmin.md, zookeeperOver.md)*\n- **Caller roles** (a network service has no single \"caller\"):\n  - **Client application** \u2014 connects on the client port, holds sessions, reads/writes znodes. Authenticated only if the operator opts in (see \u00a76/\u00a77). *(documented)*\n  - **Operator / admin** \u2014 runs the JVMs, owns `zoo.cfg`, JAAS, keystores, super-user credentials, the AdminServer, JMX. Fully trusted for the instance. *(documented)*\n  - **Peer server** \u2014 another ensemble member participating in ZAB / leader election. Authenticated only if quorum SASL or quorum TLS is enabled (off by default). *(documented: QuorumPeerConfig.java)*\n- **Component-family table**:\n\n  | Family | Representative entry point | Touches outside process? | In model? |\n  | --- | --- | --- | --- |\n  | Server core (data tree, ACL check, ZAB, sessions) | client port 2181; `ZooKeeperServer`, `PrepRequestProcessor`, `DataTree` | network, disk (snapshots/txn log) | **In** |\n  | Quorum / leader election | ports 2888/3888; `QuorumPeer` | network, disk | **In** |\n  | Java client library | `ZooKeeper`, `ClientCnxn` | network | **In** |\n  | AdminServer (embedded Jetty) | HTTP 8080 `/commands/*` | network | **In** |\n  | Four-letter-words (4lw) | client port, telnet/nc | network | **In** |\n  | Jute serialization | `BinaryInputArchive` (wire decode) | \u2014 | **In** |\n  | Dynamic reconfig | `reconfig` API, `/zookeeper/config` | network | **In** |\n  | C/C++ client + C CLI (`cli_st`) | native lib | network | In (C client), see \u00a73 for CLI |\n  | `zookeeper-contrib/*` (REST, zooinspector, perl/python, zkfuse, \u2026) | varies | varies | **Out** \u2014 \u00a73 |\n  | `zookeeper-recipes/*` (locks, queues, election) | sample code | network | **Out** \u2014 \u00a73 |\n  | `zookeeper-specifications` (TLA+) | \u2014 | \u2014 | Out (formal spec, not shipped code) |\n\n  Anything marked **Out** reappears in \u00a73 with the reason.\n\n## \u00a73 Out of scope (explicit non-goals)\n\n- **Not a public-internet service.** \"A ZooKeeper ensemble is expected to operate in a trusted computing environment. It is thus recommended deploying ZooKeeper behind a firewall.\" *(documented: zookeeperAdmin.md \"Publicly accessible deployment\")* Threats that exist only because the ensemble was exposed to the open internet against this guidance are operator misconfiguration, not server vulnerabilities \u2014 but see \u00a714, this boundary needs a sharp ruling.\n- **Not an attempt to defend against a malicious in-process caller of the Java client.** A caller already inside the client JVM has the credentials and can do anything the session can; not a meaningful adversary at this layer. *(inferred)*\n- **No notion of znode ownership.** \"ZooKeeper does not have a notion of an owner of a znode.\" *(documented: zookeeperProgrammers.md)*\n- **ACLs are not recursive / not inherited.** An ACL pertains only to a specific znode, not its children. *(documented: zookeeperProgrammers.md)* This is design, not a bug (see \u00a79 false friends).\n- **Shipped-but-unsupported code, modelled separately or not at all:**\n  - `zookeeper-contrib/*` (REST gateway, ZooInspector, perl/python/C bindings, zkfuse, zktreeutil, loggraph, monitoring): separately authored, not part of the core security guarantee. A finding here is `OUT-OF-MODEL: unsupported-component` unless the PMC says otherwise. *(inferred \u2014 \u00a714)*\n  - `zookeeper-recipes/*`: reference implementations / sample code. *(inferred \u2014 \u00a714)*\n  - The C CLI shell (`cli_st`) is an operator tool, not a server surface; historically a buffer-overflow site (CVE-2016-5017). Whether the C client *library* is in core scope vs. the *CLI* being a tool needs a ruling. *(inferred \u2014 \u00a714)*\n- **Build/release/SDLC hygiene** (action pinning, signing, dependency freshness) is out per the skill's \u00a71.\n\n## \u00a74 Trust boundaries and data flow\n\n- **Primary trust boundary = the client port and the quorum port.** Bytes arriving on either are untrusted wire input and are decoded by Jute before any ACL logic runs.\n- **The data tree is the protected asset.** Access to a znode is mediated by `ZooKeeperServer.checkACL` *(code)*. Once a request passes the ACL check (or the node has a null/empty ACL, which short-circuits to *allow*), the operation executes. *(code: `ZooKeeperServer.java` checkACL)*\n- **Trust transitions:**\n  - Wire bytes \u2192 Jute decode (request-size bounded by `jute.maxbuffer`, default `0xfffff` \u2248 1 MB) \u2192 request object. *(code: `BinaryInputArchive.java`)*\n  - Request \u2192 session auth context (the set of `Id`s the connection has accumulated via `addAuthInfo` / SASL handshake / TLS cert).\n  - Request + auth context \u2192 `checkACL` against the **target node's own ACL** (for create/delete, against the **parent's** ACL). No walk up the tree. *(code: `PrepRequestProcessor.java`)*\n- **Reachability preconditions per family** (the test a triager applies before anything else):\n  - Server-core finding: in-model only if reachable from a request a client can actually send on the client port given the configured auth posture.\n  - Quorum finding: in-model only if reachable from a peer on the quorum port \u2014 and only `VALID` if quorum auth is *enabled* (else it requires an attacker already on the quorum network, see \u00a77).\n  - AdminServer finding: in-model only if reachable via HTTP on the admin port.\n  - Jute finding: in-model only if reachable from attacker-supplied wire bytes within the `jute.maxbuffer` bound.\n\n## \u00a75 Assumptions about the environment\n\n- **Network**: A trusted, firewalled datacenter network. Client, quorum, election, admin, and JMX ports are assumed reachable only by intended parties. *(documented: Admin guide deployment section)*\n- **Quorum integrity**: A strict majority of configured servers are honest and available; ZAB safety/liveness assume crash-fault (not Byzantine) peers. *(inferred \u2014 classic ZAB assumption \u2014 \u00a714)*\n- **Disk / persistence**: The snapshot directory and transaction log are on storage the operator controls and trusts; on-disk data is **not encrypted by ZooKeeper** and snapshots/txn logs contain znode data (including digest ACL hashes) in the clear. *(inferred \u2014 \u00a714)*\n- **Clock**: Session expiry and leader-election timeouts rely on reasonably synchronized, monotonic-enough clocks; `tickTime` drives liveness. *(documented: tickTime in Admin guide; inferred for the security implication)*\n- **JVM / runtime**: A conformant JRE. `fips-mode` (`zookeeper.fips-mode`) default **true** on 3.9.0+, **false** on 3.8.x; when enabled the custom `ZKTrustManager` is disabled, so **quorum hostname verification is not available** (client-server still is). *(documented: zookeeperAdmin.md)*\n- **What ZooKeeper does to / does not do to its host** (mostly negative claims, hence mostly `(inferred)` \u2014 high-priority \u00a714 confirmation targets):\n  - It *does* open listening sockets (client, quorum, election, admin HTTP, optional JMX/metrics), read `zoo.cfg` and system properties, read JAAS config and keystores, and write snapshots/txn logs to disk. *(documented/code)*\n  - It honors a number of `zookeeper.*` **system properties** that change the security envelope at JVM start (`skipACL`, `superUser`, `4lw.commands.whitelist`, `ssl.*`, etc.) \u2014 the security posture is partly a function of the JVM command line, not just `zoo.cfg`. *(documented)*\n  - It does *not* spawn child processes or shell out as part of request handling. *(inferred \u2014 \u00a714)*\n  - The `ip` scheme over the AdminServer HTTP path honors a client-supplied `X-Forwarded-For` header. *(code: `IPAuthenticationProvider`)* \u2014 this is the root of CVE-2024-51504.\n\n## \u00a75a Build-time and configuration variants (the security envelope is a function of config)\n\nZooKeeper is really a *family* of deployment postures. The knobs below change which \u00a78 properties hold. Most ship in the **less-secure default**, which is the central tension this model must resolve with the PMC (\u00a714).\n\n| Knob | Default | Effect on model | Maintainer stance |\n| --- | --- | --- | --- |\n| `zookeeper.skipACL` | `no` | `yes` disables **all** ACL checks \u2192 full data-tree access for any client; also unauthenticated `reconfig`. *(documented)* | dev-only? \u00a714 |\n| Client authentication (`OPEN_ACL_UNSAFE` nodes, no auth provider) | open | With no ACLs/auth, any client reads/writes any node. *(code/docs)* | \u00a714 |\n| `zookeeper.sessionRequireClientSASLAuth` | `false` | `true` rejects non-SASL-authenticated clients. *(documented)* | \u00a714 |\n| `zookeeper.enforce.auth.enabled` + `enforce.auth.schemes` | `false` | `true` requires the listed auth schemes per session. *(documented)* | \u00a714 |\n| `sslQuorum` (`zookeeper.sslQuorum`) | `false` | quorum + election traffic plaintext & unauthenticated unless on. *(documented)* | \u00a714 |\n| `quorum.auth.serverRequireSasl` / `learnerRequireSasl` / `enableSasl` | `false` | quorum SASL off; peers unauthenticated. *(code: QuorumPeerConfig)* | \u00a714 |\n| `secureClientPort` / client TLS | unset | client traffic plaintext unless configured. *(documented)* | \u00a714 |\n| `ssl.clientAuth` / `ssl.quorum.clientAuth` | `need` | when TLS *is* on, client cert is required (good default). *(documented)* | \u2014 |\n| `ssl.hostnameVerification` / `ssl.quorum.hostnameVerification` | `true` | disabling enables MITM; \"only recommended for testing.\" *(documented)* | \u2014 |\n| `reconfigEnabled` | `false` | `true` allows runtime membership change via API. *(documented)* | \u00a714 |\n| `4lw.commands.whitelist` | only `srvr` (+`isro` if RO mode) | wildcard `*` exposes all 4lw incl. info-disclosing/expensive ones. *(documented/code)* | \u2014 |\n| `admin.enableServer` | `true` | embedded Jetty AdminServer on `0.0.0.0:8080`, most commands unauthenticated. *(documented/code)* | \u00a714 |\n| `admin.needClientAuth` / `admin.forceHttps` / `admin.portUnification` | `false` | admin HTTP is plaintext, no client auth, unless set. *(documented)* | \u00a714 |\n| `zookeeper.DigestAuthenticationProvider.digestAlg` | `SHA1` | unsalted; \"will be deprecated for security issues.\" *(documented)* | \u2014 |\n| `fips-mode` | `true` (3.9+) / `false` (3.8) | when true, disables `ZKTrustManager` \u2192 no quorum hostname verification. *(documented)* | \u2014 |\n\n**Insecure-default ruling needed (wave 1, \u00a714):** for every row marked \"\u00a714\", the model is ambiguous until the PMC rules whether the default *is* the supported production posture (report against it = `VALID`) or a dev-convenience operators must flip (= `OUT-OF-MODEL: non-default-build`, and the requirement moves to \u00a710).\n\n## \u00a76 Assumptions about inputs\n\nZooKeeper accepts: (a) client requests on the client port, (b) quorum/election messages on the quorum ports, (c) HTTP requests on the AdminServer, (d) 4lw strings on the client port, (e) `zoo.cfg` / dynamic config / system properties from the operator (trusted).\n\n**Per-parameter trust table** (route/message-oriented, as for a network service):\n\n| Surface / message | Parameter | Attacker-controllable? | Caller/operator must enforce |\n| --- | --- | --- | --- |\n| Client request (any op) | request bytes / path / data | **yes** (untrusted client) | size \u2264 `jute.maxbuffer`; ACLs on nodes; enable auth if clients are untrusted |\n| `create` / `setData` | znode `data` blob | **yes** | quota (`setquota`); znode size; ACL on parent |\n| `create`/`setACL` | ACL list | **yes** | meaningful (non-`OPEN_ACL_UNSAFE`) ACLs if multi-tenant |\n| `getChildren` / watches | path, watch registration | **yes** | READ perm on node (note CVE-2024-23944 persistent-watcher leak) |\n| `addAuthInfo` (digest) | `user:password` | **yes** | sent **cleartext** \u2192 use only over TLS/localhost *(documented)* |\n| `ip` scheme | source IP | **spoofable** (and `X-Forwarded-For` on HTTP path) | network-level controls; do not rely on `ip` across untrusted nets |\n| Quorum / election message | peer wire bytes | **yes if quorum net is reachable** | enable quorum SASL/TLS; firewall quorum ports |\n| AdminServer | HTTP path `/commands/`, headers | **yes if admin port reachable** | restrict admin port; `needClientAuth`+TLS for x509 |\n| 4lw | 4-char command string | **yes if whitelisted** | keep whitelist minimal; firewall |\n| `zoo.cfg`, JAAS, keystores, `zookeeper.*` sysprops | all | **no \u2014 operator-trusted** | protect these files / JVM args |\n\n- **Size / shape**: A single request/response is bounded by `jute.maxbuffer` (default ~1 MB; `BinaryInputArchive.maxBuffer`), with `zookeeper.jute.maxbuffer.extrasize` slack. *(code)* `maxClientCnxns` default 60 per IP; `maxCnxns` default 0 (unlimited). *(documented)*\n\n## \u00a77 Adversary model\n\n- **In-scope adversary: the unauthenticated/low-privilege network client** that can reach the client port. Capabilities: open sessions, send arbitrary (size-bounded) requests, register watches, run whitelisted 4lw, attempt auth. Goals: read/modify data it should not, exhaust resources, crash a server, leak session/config info. *(inferred \u2014 \u00a714)*\n- **In-scope adversary: HTTP client reaching the AdminServer** \u2014 can invoke unauthenticated commands (info disclosure) and, where snapshot/restore auth is weak, more. *(documented via CVE-2025-58457 / CVE-2024-51504 patterns)*\n- **Authenticated-but-Byzantine peer** *(distributed-system actor)*: a server that holds a legitimate quorum identity, passes the handshake, then behaves arbitrarily. ZAB tolerates **crash faults** of a minority, **not Byzantine faults.** Safety holds while a strict majority are honest and available; with `> n/2` faulty/colluding peers, the model breaks. The complement (`\u2265` majority Byzantine, or a forged-identity peer when quorum auth is off) is **out of scope** \u2192 \u00a73. *(inferred \u2014 \u00a714; this threshold must be stated by the PMC)*\n- **Out of scope:**\n  - An attacker with operator privileges (owns `zoo.cfg`, JAAS, keystores, disk, JVM args). They have already won. *(inferred \u2014 \u00a714)*\n  - An attacker already on the quorum/election network when quorum auth is *off* \u2014 this is the documented \"trusted network\" assumption (\u00a75); such an attacker can impersonate a peer. A report requiring this is `OUT-OF-MODEL: adversary-not-in-scope` **only if** the PMC affirms quorum-off is a supported posture (else it is `VALID`). *(inferred \u2014 \u00a714)*\n  - Side-channel / timing / co-tenant memory adversaries against the JVM. *(inferred \u2014 \u00a714)*\n  - On-disk attacker reading snapshots/txn logs (no at-rest encryption claim). *(inferred \u2014 \u00a714)*\n\n## \u00a78 Security properties the project provides\n\nEach property states: the property + conditions, violation symptom, severity tier, provenance. **All `(inferred)` here are proposals pending PMC confirmation (\u00a714).**\n\n1. **ACL-mediated access control on individual znodes.** *Conditions*: a non-trivial ACL is set on the node, the matching auth provider is configured, and `skipACL=no`. A request lacking the required permission is rejected with `NoAuth`. *Symptom of violation*: a client reads/writes a node without holding the required `Id`/permission. *Severity*: **security-critical** (auth bypass \u2192 CVE). *(documented/code: `checkACL`)*\n2. **Authentication via configured schemes** (`digest`, `sasl`/Kerberos, `x509`/mTLS). *Conditions*: provider enabled; for `digest`, channel confidentiality is the caller's job. *Symptom*: identity accepted that should not be (e.g. SASL quorum bypass = CVE-2023-44981). *Severity*: **security-critical**. *(documented/code)*\n3. **Optional transport confidentiality & integrity (TLS)** for client-server (`secureClientPort`) and quorum (`sslQuorum`), with hostname verification on by default and client-cert auth `need` by default *when TLS is enabled*. *Symptom*: plaintext exposure or accepted MITM cert (cf. CVE-2026-24281, CVE hostname-bypass). *Severity*: **security-critical** when TLS is configured and the guarantee is breached. *(documented)*\n4. **Replicated-state safety (linearizable writes, FIFO client order) under ZAB**, given a majority of honest, available, crash-only servers. *Symptom*: divergent state across replicas / lost or reordered committed writes / a fork. *Severity*: **security-critical** if reachable by an in-scope adversary; otherwise correctness. *(inferred \u2014 \u00a714; this is ZAB's documented design but the security framing needs PMC sign-off)*\n5. **Bounded per-request size.** Requests/responses exceeding `jute.maxbuffer` (default ~1 MB) are rejected at decode. *Symptom*: unbounded allocation from a single message. *Severity*: security-relevant DoS guard. *(code)*\n6. **Connection rate limiting per source IP** via `maxClientCnxns` (default 60). *Symptom*: single IP exhausts connection slots. *Severity*: partial DoS guard. *(documented)*\n7. **Quota accounting with optional hard enforcement.** Soft quota *warns only*; hard quota throws `QuotaExceededException`. *Symptom*: a tenant exceeds count/byte limits silently (soft) \u2014 by design. *Severity*: correctness / operational, not a memory-safety guarantee. *(documented: zookeeperQuotas.md)*\n8. **Audit logging** of mutating operations when enabled (`ZKAuditProvider`). *Symptom*: a mutating op leaves no audit trail when auditing is on. *Severity*: detective control, not preventive. *(code: `audit/`)*\n\n> Resource note: ZooKeeper makes **no general guarantee of bounded total memory or CPU under adversarial request mixes** beyond the per-request `jute.maxbuffer` cap and connection limits. The data tree is held **in memory**; aggregate size is bounded by quotas only if hard quotas are set. See \u00a79. *(inferred \u2014 \u00a714)*\n\n## \u00a79 Security properties the project does *NOT* provide\n\nThis is the highest-value section for an integrator. State plainly:\n\n- **No secure-by-default posture.** Out of the box, with `OPEN_ACL_UNSAFE` nodes and no auth provider, **any client that reaches the port can read and write the entire data tree.** Authentication and ACLs are **opt-in**. *(documented/code)*\n- **No on-the-wire encryption by default.** Client and quorum traffic are plaintext unless TLS is explicitly configured. `digest` credentials travel **in cleartext**. *(documented)*\n- **No quorum authentication by default.** Peer and leader-election traffic is unauthenticated unless quorum SASL or quorum TLS is enabled. *(documented/code)*\n- **No at-rest encryption.** Snapshots and transaction logs store znode data (and digest ACL hashes) unencrypted. *(inferred \u2014 \u00a714)*\n- **No Byzantine fault tolerance.** A malicious peer holding a valid identity, or a majority of faulty peers, can violate safety. *(inferred \u2014 \u00a714)*\n- **No defense against a malicious/over-privileged client beyond ACLs.** ZooKeeper will not protect node A from client B if B holds (or can spoof) the credentials A's ACL trusts.\n- **No general resource-exhaustion guarantee.** Watches, connections, and tree size driven by clients can pressure heap/CPU; only per-request size, per-IP connection count, and (opt-in) hard quotas bound this. Expensive 4lw (`wchc`/`wchp`/`dump`) and large watch sets are a known DoS vector (CVE-2017-5637). *(documented/inferred \u2014 \u00a714)*\n\n**False friends (features mistaken for security primitives):**\n\n- **`ip` authentication scheme** \u2014 looks like authentication; it is **source-IP matching**, trivially spoofable on an untrusted network, and over the AdminServer HTTP path it trusts a client-supplied `X-Forwarded-For` header. Not an authentication boundary across untrusted networks. *(code; CVE-2024-51504)*\n- **`digest` scheme** \u2014 looks like password auth; the password is sent **cleartext** and stored as an **unsalted SHA1** hash. Confidentiality is entirely the transport's job. *(documented)*\n- **ACLs are NOT recursive** \u2014 setting a restrictive ACL on `/app` does **not** protect `/app/status`; a world-readable child stays world-readable. An integrator who \"locks down a subtree\" by ACL-ing the root has not locked anything below it. *(documented)*\n- **`world:anyone`** \u2014 the conventional default `Id`; means *no* access control.\n- **Quotas are not a security boundary by default** \u2014 soft quota only logs; it does not stop a tenant from filling memory. *(documented)*\n- **The `auth` scheme** in `setACL` grants to *whatever the setter authenticated as*, not a named principal \u2014 easy to mis-reason about. *(documented)*\n\n**Well-known attack classes left to the operator/integrator** (one line each, integrator-on-notice):\n\n- **DoS via expensive operations / large watch sets / connection floods** \u2014 mitigate with whitelist, `maxClientCnxns`, quotas, firewalling.\n- **Information disclosure via 4lw and AdminServer** (`envi`, `conf`, `cons`, `dump`, `mntr`) \u2014 unauthenticated when reachable.\n- **MITM on plaintext channels** \u2014 mitigate with TLS + hostname verification.\n- **Credential theft on plaintext `digest`** \u2014 mitigate with TLS.\n- **Reconfig abuse** (adding a rogue server / removing quorum members) when `reconfigEnabled=true` and ACLs/auth are weak. *(documented: zookeeperReconfig.md)*\n\n## \u00a710 Downstream responsibilities (the operator's contract)\n\nFor ZooKeeper \"user\" = **operator/deployer**. To make the \u00a75\u2013\u00a77 assumptions hold:\n\n1. **Deploy inside a trusted, firewalled network.** Do not expose client (2181), quorum (2888), election (3888), admin (8080), JMX, or metrics ports to untrusted networks. *(documented)*\n2. **If clients are not fully trusted**, set meaningful ACLs (not `OPEN_ACL_UNSAFE`) **and** enable authentication (`sessionRequireClientSASLAuth` or `enforce.auth.*`). ACLs alone on `OPEN_ACL_UNSAFE` trees protect nothing.\n3. **Set ACLs on every sensitive node**, including children \u2014 ACLs do not inherit.\n4. **Use TLS** (`secureClientPort` / `sslQuorum`) whenever traffic crosses a link you do not fully trust; never disable hostname verification in production. Use `digest` only over TLS or localhost.\n5. **Enable quorum authentication** (quorum SASL and/or quorum TLS) \u2014 it is off by default.\n6. **Restrict the AdminServer**: disable it (`admin.enableServer=false`) if unused, or bind/firewall it and require client auth + HTTPS; assume most commands are unauthenticated otherwise.\n7. **Keep the 4lw whitelist minimal**; do not set `*` on an exposed instance.\n8. **Leave `skipACL=no`** in any environment where the client port is reachable by untrusted parties.\n9. **Protect `zoo.cfg`, JAAS files, keystores, super-user digests, and the snapshot/txn-log directory** at the OS level \u2014 these are the operator-trusted inputs and the unencrypted data at rest.\n10. **Guard `reconfigEnabled`** and the `/zookeeper/config` write ACL; keep reconfig off unless needed and authenticated.\n\n## \u00a711 Known misuse patterns\n\n- **Treating ZooKeeper as internet-facing.** Binding to a public interface with default config exposes the whole data tree. *What it looks like*: 2181 open to the world. *Why unsafe*: no auth by default. *Instead*: firewall + auth + TLS.\n- **`OPEN_ACL_UNSAFE` in production multi-tenant trees.** *Why unsafe*: any client can mutate/delete. *Instead*: per-node ACLs + auth.\n- **ACL-ing only the root of a subtree.** Relying on a parent ACL to protect children. *Instead*: set ACLs on each node; ACLs are not recursive.\n- **Relying on the `ip` scheme across untrusted networks**, or behind a proxy that sets `X-Forwarded-For`. *Instead*: SASL/x509.\n- **`digest` over plaintext.** Leaks credentials. *Instead*: TLS or localhost only.\n- **Leaving quorum auth/TLS off on a shared network.** Allows peer impersonation / reconfig abuse. *Instead*: quorum SASL + TLS.\n- **Setting `4lw.commands.whitelist=*` or exposing the AdminServer** for convenience. Leaks config/session/watch data. *Instead*: minimal whitelist, restricted admin port.\n- **`skipACL=yes` for throughput.** Opens full data-tree access (and unauthenticated reconfig). *Instead*: never with an untrusted client port.\n\n## \u00a711a Known non-findings (recurring false positives)\n\nPatterns tools/researchers repeatedly report that are **not** bugs under this model (cite the licensing section):\n\n- **\"Anyone can read/write \u2014 no auth!\"** against a default config \u2014 by design; auth/ACLs are opt-in per \u00a79, and exposure presupposes the operator violated \u00a710.1. \u2192 `BY-DESIGN` / `OUT-OF-MODEL: trusted-input` depending on framing (PMC to set, \u00a714).\n- **\"`world:anyone` ACL is insecure.\"** It is the documented open ACL; using it is a \u00a711 misuse, not a server defect. \u2192 `KNOWN-NON-FINDING` (\u00a79).\n- **\"Child znode readable despite restrictive parent ACL.\"** ACLs are not recursive by design. \u2192 `BY-DESIGN` (\u00a79). *(documented)*\n- **\"`digest` password sent in cleartext.\"** Documented; transport security is the caller's job. \u2192 `BY-DESIGN` (\u00a79). *(documented)*\n- **\"4lw / AdminServer command leaks environment/config.\"** Whitelisted/enabled by the operator; exposure presupposes \u00a710 was violated. \u2192 `OUT-OF-MODEL: trusted-input` or `KNOWN-NON-FINDING` (PMC, \u00a714).\n- **\"Quorum traffic unauthenticated/plaintext.\"** Default posture; trusted-network assumption (\u00a75). Whether reportable depends on the \u00a714 quorum-default ruling.\n- **\"Unsalted SHA1 in digest hash.\"** Known/documented limitation; \u2192 `BY-DESIGN` pending the planned algorithm migration. *(documented)*\n\n> Note: this list assumes the PMC affirms the \"trusted network / opt-in auth\" posture. If instead the PMC declares secure-by-default the supported posture, several of these flip to `VALID`. **This single ruling reshapes \u00a78/\u00a79/\u00a711a/\u00a713 \u2014 it is the top \u00a714 question.**\n\n## \u00a712 Conditions that would change this model\n\n- A new public API, request type, or wire-format change.\n- A new network surface (new listener/port) or a change in a default (e.g. another `fips-mode`-style flip, enabling auth by default, AdminServer auth-by-default).\n- Promotion of a `contrib/` or `recipes/` component into supported core.\n- Adoption of at-rest encryption, BFT, or secure-by-default \u2014 any of which would rewrite \u00a78/\u00a79.\n- **Evidence of incompleteness**: any report that cannot be routed to exactly one \u00a713 disposition is a `MODEL-GAP` and triggers a revision (add the property to \u00a78/\u00a79), not an ad-hoc call.\n\n## \u00a713 Triage dispositions (closed set)\n\n| Disposition | Meaning | Licensed by |\n| --- | --- | --- |\n| `VALID` | Violates a claimed property via an in-scope adversary and input. | \u00a78, \u00a76, \u00a77 |\n| `VALID-HARDENING` | No \u00a78 property violated, but a \u00a711 misuse is easy enough to warrant hardening. Private report, fixed at maintainer discretion, usually no CVE. | \u00a711 |\n| `OUT-OF-MODEL: trusted-input` | Requires attacker control of an input the model marks trusted (e.g. `zoo.cfg`, operator sysprops, a node the report assumes should be auth'd but the operator left open). | \u00a76 |\n| `OUT-OF-MODEL: adversary-not-in-scope` | Requires a capability the model excludes (operator privilege, on-quorum-network when quorum-off is supported, side channel, on-disk). | \u00a77 |\n| `OUT-OF-MODEL: unsupported-component` | Lands in `contrib/`, `recipes/`, or other \u00a73 code. | \u00a73 |\n| `OUT-OF-MODEL: non-default-build` | Manifests only under a discouraged/non-default \u00a75a knob the PMC ruled dev-only. | \u00a75a |\n| `BY-DESIGN: property-disclaimed` | Concerns a \u00a79-disclaimed property (non-recursive ACLs, cleartext digest, no at-rest encryption, etc.). | \u00a79 |\n| `KNOWN-NON-FINDING` | Matches a \u00a711a recurring false positive. | \u00a711a |\n| `MODEL-GAP` | Cannot be cleanly routed above \u2192 revise the model. | triggers \u00a712 |\n\n## \u00a714 Open questions for the maintainers\n\nGrouped in waves; each states a proposed answer to confirm/correct. **Wave 1 reshapes the most.**\n\n**Wave 1 \u2014 the secure-by-default question (reshapes \u00a73, \u00a77, \u00a78, \u00a79, \u00a711a, \u00a713):**\n1. *Proposed:* \"The supported production posture is **opt-in security on a trusted, firewalled network**: default open ACLs / no client auth / plaintext / quorum-auth-off are *supported defaults*, and a report that merely observes them (without the operator following \u00a710) is `OUT-OF-MODEL: trusted-input`, not `VALID`.\" Confirm, or declare secure-by-default the supported posture. (Lands: \u00a73, \u00a77, \u00a79, \u00a711a.)\n2. *Proposed:* \"An attacker on the **quorum/election network while quorum auth is off** is **out of scope** (trusted-network assumption).\" Confirm, or rule quorum-off a dev-only posture (then peer-impersonation reports become `VALID`). (Lands: \u00a75a, \u00a77, \u00a713.)\n3. *Proposed:* \"`skipACL=yes` is **dev/benchmark-only**; reports requiring it are `OUT-OF-MODEL: non-default-build`.\" Confirm. (Lands: \u00a75a, \u00a710, \u00a713.)\n\n**Wave 2 \u2014 scope of shipped code:**\n4. *Proposed:* \"`zookeeper-contrib/*` and `zookeeper-recipes/*` are **out of the core security model** (separately authored / sample code); findings are `OUT-OF-MODEL: unsupported-component`.\" Confirm per-component, especially the **REST gateway** and **ZooInspector**. (Lands: \u00a72, \u00a73.)\n5. *Proposed:* \"The **C client library** is in core scope, but the **C CLI shell (`cli_st`)** is an operator tool, not a server surface.\" Confirm. (Lands: \u00a72, \u00a73.)\n\n**Wave 3 \u2014 environment / negative claims (mostly `(inferred)`):**\n6. *Proposed:* \"ZooKeeper performs **no at-rest encryption**; protecting the snapshot/txn-log directory is an operator responsibility.\" Confirm. (Lands: \u00a75, \u00a79, \u00a710.)\n7. *Proposed:* \"Request handling **never spawns child processes / shells out**.\" Confirm. (Lands: \u00a75.)\n8. *Proposed:* \"ZAB assumes **crash-fault, non-Byzantine** peers; safety holds with a strict honest majority (`> n/2` honest).\" Confirm the threshold wording for \u00a77/\u00a78. (Lands: \u00a77, \u00a78.)\n\n**Wave 4 \u2014 property severities and DoS line:**\n9. *Proposed:* \"There is **no general bounded-memory/CPU guarantee** under adversarial request mixes beyond `jute.maxbuffer` + `maxClientCnxns` + opt-in hard quotas; a hang or super-linear blowup driven by a single bounded request *is* a bug, but heap pressure from many legitimate-looking requests/watches is an operational concern, not a CVE.\" Confirm the DoS line for \u00a78/\u00a79/\u00a713. (Lands: \u00a78, \u00a79.)\n10. *Proposed:* \"Replicated-state **safety violations (forks, lost committed writes)** are security-critical; **liveness/availability** degradation under load is correctness/operational.\" Confirm severity tiers. (Lands: \u00a78.)\n\n**Wave 5 \u2014 meta:**\n11. Where should this document live and how should it be versioned with releases \u2014 `zookeeper-docs/.../threatModel.md` published on the site, or repo-root draft? Should it be linked from `security.html`?\n12. Is there any existing internal threat-model or security-design note (PMC-private) this should be reconciled against as a `(documented)` source?\n\n## \u00a715 Optional: machine-readable companion\n\nA sidecar (`threat-model.yaml`) for automated triage is **deferred until \u00a714 wave 1 is resolved**, since the disposition of the default-posture findings determines almost every `in_scope` flag. Once ratified, emit: entry points \u2192 per-parameter trust (from \u00a76); component families \u2192 in/out (\u00a72/\u00a73); \u00a75a knobs \u2192 security-relevant/default/stance; \u00a78 properties \u2192 severity + violation symptom; \u00a79 disclaimed + false friends; \u00a711a non-findings; \u00a713 labels. The prose remains canonical.\n\n---\n\n### Appendix \u2014 `security.html` / docs back-map (coverage proof)\n\n| Source statement | Lands in |\n| --- | --- |\n| \"report to security@zookeeper.apache.org before disclosing\" | \u00a71 reporting cross-ref |\n| \"expected to operate in a trusted computing environment \u2026 behind a firewall\" | \u00a73, \u00a75, \u00a710.1 |\n| \"ACLs are not recursive\" | \u00a73, \u00a79 false friends |\n| \"no notion of an owner of a znode\" | \u00a73 |\n| digest \"sent in clear text\" / \"plaintext\" | \u00a76, \u00a79 |\n| `skipACL` \"opens up full access to the data tree to everyone\" | \u00a75a, \u00a79, \u00a710 |\n| reconfig \"any unauthenticated users can use reconfig API\" (with skipACL) | \u00a75a, \u00a711 |\n| `4lw.commands.whitelist` default `srvr` | \u00a75a, \u00a76, \u00a711a |\n| `fips-mode` disables quorum hostname verification | \u00a75, \u00a75a |\n| quota soft vs hard semantics | \u00a78 |\n| CVE history (IP-auth bypass, SASL quorum bypass, persistent-watcher leak, 4lw DoS, hostname-verification bypass) | informs \u00a77, \u00a79, \u00a711a (patterns, not a CVE list) |", "url": "https://gist.github.com/ppkarwasz/f5be1b5c0182fe665252101c5f24d39f"}, {"timestamp": "2026-07-02T00:03:15Z", "date_only": false, "value": "2026-07-02T00:03:15+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-07-02T00:03:15Z", "date_only": false, "value": "2026-07-02T00:03:15+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-02T00:03:15Z", "date_only": false, "value": "2026-07-02T00:03:15+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "vulnerabilities.7.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-14T08:15:53.650Z", "date_only": false, "value": "2026-07-14T08:15:53.650000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:70421", "record": "RHSA-2026:70421", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2026-07-14T09:01:12.413Z", "date_only": false, "value": "2026-07-14T09:01:12.413297+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:70421", "record": "RHSA-2026:70421", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2026-07-15T01:17:24.357Z", "date_only": false, "value": "2026-07-15T01:17:24.357Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-24281", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-15T01:17:24.357Z", "date_only": false, "value": "2026-07-15T01:17:24.357Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-24281", "field": "containers.adp.2.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-15T02:18:48.563Z", "date_only": false, "value": "2026-07-15T02:18:48.563", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-24281", "record": "FKIE_CVE-2026-24281", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-20T00:00:00Z", "date_only": true, "value": "2026-07-20", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0933", "record": "CERTFR-2026-AVI-0933", "field": "vendor_advisories.8.published_at", "linked_record": true}, {"timestamp": "2026-07-21T00:00:00Z", "date_only": true, "value": "2026-07-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0933", "record": "CERTFR-2026-AVI-0933", "field": "vendor_advisories.2.published_at", "linked_record": true}, {"timestamp": "2026-07-21T07:39:12.776Z", "date_only": false, "value": "2026-07-21T07:39:12.776280Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-SH44648", "record": "CLEANSTART-2026-SH44648", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-21T07:50:38.904Z", "date_only": false, "value": "2026-07-21T07:50:38.904956Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-WT54034", "record": "CLEANSTART-2026-WT54034", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-21T08:54:49.657Z", "date_only": false, "value": "2026-07-21T08:54:49.657770Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-RS65756", "record": "CLEANSTART-2026-RS65756", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-21T10:28:38.663Z", "date_only": false, "value": "2026-07-21T10:28:38.663395Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-CG99434", "record": "CLEANSTART-2026-CG99434", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-21T11:05:54.849Z", "date_only": false, "value": "2026-07-21T11:05:54.849213Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-EW45327", "record": "CLEANSTART-2026-EW45327", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-21T22:11:17.470Z", "date_only": false, "value": "2026-07-21T22:11:17.470000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:70421", "record": "RHSA-2026:70421", "field": "vulnerabilities.3.release_date", "linked_record": true}, {"timestamp": "2026-07-21T23:03:36.448Z", "date_only": false, "value": "2026-07-21T23:03:36.448652+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:70421", "record": "RHSA-2026:70421", "field": "vulnerabilities.3.discovery_date", "linked_record": true}, {"timestamp": "2026-07-22T00:00:00Z", "date_only": true, "value": "2026-07-22", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0933", "record": "CERTFR-2026-AVI-0933", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-07-23T00:00:00Z", "date_only": true, "value": "2026-07-23", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0933", "record": "CERTFR-2026-AVI-0933", "field": "vendor_advisories.4.published_at", "linked_record": true}, {"timestamp": "2026-07-24T00:00:00Z", "date_only": false, "value": "2026-07-24T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0933", "record": "CERTFR-2026-AVI-0933", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-07-24T00:00:00Z", "date_only": true, "value": "2026-07-24", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0933", "record": "CERTFR-2026-AVI-0933", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-24T00:00:00Z", "date_only": false, "value": "2026-07-24T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0933", "record": "CERTFR-2026-AVI-0933", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-07-30T07:10:53Z", "date_only": false, "value": "2026-07-30T07:10:53Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-AJ02810", "record": "CLEANSTART-2026-AJ02810", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-30T07:10:53Z", "date_only": false, "value": "2026-07-30T07:10:53Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-CN68663", "record": "CLEANSTART-2026-CN68663", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-30T07:10:53Z", "date_only": false, "value": "2026-07-30T07:10:53Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-FQ66587", "record": "CLEANSTART-2026-FQ66587", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-30T07:10:53Z", "date_only": false, "value": "2026-07-30T07:10:53Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-OL08873", "record": "CLEANSTART-2026-OL08873", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-30T07:10:53Z", "date_only": false, "value": "2026-07-30T07:10:53Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-OU92014", "record": "CLEANSTART-2026-OU92014", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-04T00:36:24Z", "date_only": false, "value": "2026-09-04T00:36:24+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-ZOOKEEPER-2026-24281", "record": "BIT-ZOOKEEPER-2026-24281", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-10T02:58:12.703Z", "date_only": false, "value": "2026-09-10T02:58:12.703028Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-EC45528", "record": "CLEANSTART-2026-EC45528", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-18T10:23:16.595Z", "date_only": false, "value": "2026-09-18T10:23:16.595761Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-UU38488", "record": "CLEANSTART-2026-UU38488", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-AJ02810", "record": "CLEANSTART-2026-AJ02810", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-AO61361", "record": "CLEANSTART-2026-AO61361", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-AV84730", "record": "CLEANSTART-2026-AV84730", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-CF62516", "record": "CLEANSTART-2026-CF62516", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-CG99434", "record": "CLEANSTART-2026-CG99434", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-CN68663", "record": "CLEANSTART-2026-CN68663", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-DY69070", "record": "CLEANSTART-2026-DY69070", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-EC45528", "record": "CLEANSTART-2026-EC45528", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-EW45327", "record": "CLEANSTART-2026-EW45327", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-EZ90321", "record": "CLEANSTART-2026-EZ90321", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-FQ66587", "record": "CLEANSTART-2026-FQ66587", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-GN46454", "record": "CLEANSTART-2026-GN46454", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-IS05941", "record": "CLEANSTART-2026-IS05941", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-JK47870", "record": "CLEANSTART-2026-JK47870", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-JU62349", "record": "CLEANSTART-2026-JU62349", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-KB76878", "record": "CLEANSTART-2026-KB76878", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-KV09488", "record": "CLEANSTART-2026-KV09488", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-LO22603", "record": "CLEANSTART-2026-LO22603", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-OL08873", "record": "CLEANSTART-2026-OL08873", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-OU92014", "record": "CLEANSTART-2026-OU92014", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-RD06185", "record": "CLEANSTART-2026-RD06185", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-RS65756", "record": "CLEANSTART-2026-RS65756", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-SH44648", "record": "CLEANSTART-2026-SH44648", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-SQ91016", "record": "CLEANSTART-2026-SQ91016", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-SR31778", "record": "CLEANSTART-2026-SR31778", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-SV95049", "record": "CLEANSTART-2026-SV95049", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-TK07726", "record": "CLEANSTART-2026-TK07726", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-VN28553", "record": "CLEANSTART-2026-VN28553", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-WK99982", "record": "CLEANSTART-2026-WK99982", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-WT54034", "record": "CLEANSTART-2026-WT54034", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-AJ02810", "record": "CLEANSTART-2026-AJ02810", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-AO61361", "record": "CLEANSTART-2026-AO61361", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-AV84730", "record": "CLEANSTART-2026-AV84730", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-CF62516", "record": "CLEANSTART-2026-CF62516", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-CG99434", "record": "CLEANSTART-2026-CG99434", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-CN68663", "record": "CLEANSTART-2026-CN68663", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-DY69070", "record": "CLEANSTART-2026-DY69070", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-EC45528", "record": "CLEANSTART-2026-EC45528", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-EW45327", "record": "CLEANSTART-2026-EW45327", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-EZ90321", "record": "CLEANSTART-2026-EZ90321", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-FQ66587", "record": "CLEANSTART-2026-FQ66587", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-GN46454", "record": "CLEANSTART-2026-GN46454", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-IS05941", "record": "CLEANSTART-2026-IS05941", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-JK47870", "record": "CLEANSTART-2026-JK47870", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-JU62349", "record": "CLEANSTART-2026-JU62349", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-KB76878", "record": "CLEANSTART-2026-KB76878", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-KV09488", "record": "CLEANSTART-2026-KV09488", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-LO22603", "record": "CLEANSTART-2026-LO22603", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-OL08873", "record": "CLEANSTART-2026-OL08873", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-OU92014", "record": "CLEANSTART-2026-OU92014", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-RD06185", "record": "CLEANSTART-2026-RD06185", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-RS65756", "record": "CLEANSTART-2026-RS65756", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-SH44648", "record": "CLEANSTART-2026-SH44648", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-SQ91016", "record": "CLEANSTART-2026-SQ91016", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-SR31778", "record": "CLEANSTART-2026-SR31778", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-SV95049", "record": "CLEANSTART-2026-SV95049", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-TK07726", "record": "CLEANSTART-2026-TK07726", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-VN28553", "record": "CLEANSTART-2026-VN28553", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-WK99982", "record": "CLEANSTART-2026-WK99982", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-WT54034", "record": "CLEANSTART-2026-WT54034", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-22T21:31:42Z", "date_only": false, "value": "2026-09-22T21:31:42+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:70421", "record": "RHSA-2026:70421", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-09-22T21:31:42Z", "date_only": false, "value": "2026-09-22T21:31:42+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:70421", "record": "RHSA-2026:70421", "field": "document.tracking.initial_release_date", "linked_record": true}, {"timestamp": "2026-09-22T21:31:42Z", "date_only": false, "value": "2026-09-22T21:31:42+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:70421", "record": "RHSA-2026:70421", "field": "vulnerabilities.0.remediations.0.date", "linked_record": true}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": true, "value": "2026-10-08", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "vendor_advisories.13.published_at", "linked_record": true}, {"timestamp": "2026-10-09T06:11:44Z", "date_only": false, "value": "2026-10-09T06:11:44Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-UU38488", "record": "CLEANSTART-2026-UU38488", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-09T07:48:50Z", "date_only": false, "value": "2026-10-09T07:48:50Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-LG97099", "record": "CLEANSTART-2026-LG97099", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-09T14:41:21Z", "date_only": false, "value": "2026-10-09T14:41:21+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:19678", "record": "RHSA-2026:19678", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-10-11T00:00:00Z", "date_only": true, "value": "2026-10-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "vendor_advisories.3.published_at", "linked_record": true}, {"timestamp": "2026-10-12T00:00:00Z", "date_only": true, "value": "2026-10-12", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "vendor_advisories.7.published_at", "linked_record": true}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": true, "value": "2026-10-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": true, "value": "2026-10-14", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "vendor_advisories.15.published_at", "linked_record": true}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": true, "value": "2026-10-15", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "vendor_advisories.1.published_at", "linked_record": true}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-10-17T09:39:31Z", "date_only": false, "value": "2026-10-17T09:39:31Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-24281", "record": "UBUNTU-CVE-2026-24281", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-20T13:08:00Z", "date_only": false, "value": "2026-10-20T13:08:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:70421", "record": "RHSA-2026:70421", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-10-30T11:03:32.059Z", "date_only": false, "value": "2026-10-30T11:03:32.059861Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-LG97099", "record": "CLEANSTART-2026-LG97099", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T13:28:55.009Z", "date_only": false, "value": "2026-10-31T13:28:55.009825Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-TC39210", "record": "CLEANSTART-2026-TC39210", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-01T00:00:00Z", "date_only": true, "value": "2026-11-01", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1472", "record": "CERTFR-2026-AVI-1472", "field": "vendor_advisories.15.published_at", "linked_record": true}, {"timestamp": "2026-11-02T00:00:00Z", "date_only": true, "value": "2026-11-02", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1472", "record": "CERTFR-2026-AVI-1472", "field": "vendor_advisories.2.published_at", "linked_record": true}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": true, "value": "2026-11-03", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1472", "record": "CERTFR-2026-AVI-1472", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": true, "value": "2026-11-04", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1472", "record": "CERTFR-2026-AVI-1472", "field": "vendor_advisories.5.published_at", "linked_record": true}, {"timestamp": "2026-11-05T00:00:00Z", "date_only": true, "value": "2026-11-05", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1472", "record": "CERTFR-2026-AVI-1472", "field": "vendor_advisories.12.published_at", "linked_record": true}, {"timestamp": "2026-11-05T13:16:31Z", "date_only": false, "value": "2026-11-05T13:16:31+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:14272", "record": "RHSA-2026:14272", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-05T13:16:31Z", "date_only": false, "value": "2026-11-05T13:16:31+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:14272", "record": "RHSA-2026:14272", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-05T13:16:31Z", "date_only": false, "value": "2026-11-05T13:16:31+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:14272", "record": "RHSA-2026:14272", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-05T13:16:33Z", "date_only": false, "value": "2026-11-05T13:16:33+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:14276", "record": "RHSA-2026:14276", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-05T13:16:33Z", "date_only": false, "value": "2026-11-05T13:16:33+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:14276", "record": "RHSA-2026:14276", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-05T13:16:33Z", "date_only": false, "value": "2026-11-05T13:16:33+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:14276", "record": "RHSA-2026:14276", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-05T13:16:40Z", "date_only": false, "value": "2026-11-05T13:16:40+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:19678", "record": "RHSA-2026:19678", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-05T13:16:40Z", "date_only": false, "value": "2026-11-05T13:16:40+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:19678", "record": "RHSA-2026:19678", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-05T13:16:40Z", "date_only": false, "value": "2026-11-05T13:16:40+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:19678", "record": "RHSA-2026:19678", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-05T13:17:07Z", "date_only": false, "value": "2026-11-05T13:17:07+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:8509", "record": "RHSA-2026:8509", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-05T13:17:07Z", "date_only": false, "value": "2026-11-05T13:17:07+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:8509", "record": "RHSA-2026:8509", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-05T13:17:07Z", "date_only": false, "value": "2026-11-05T13:17:07+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:8509", "record": "RHSA-2026:8509", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-05T16:49:19Z", "date_only": false, "value": "2026-11-05T16:49:19+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:70421", "record": "RHSA-2026:70421", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-05T16:49:19Z", "date_only": false, "value": "2026-11-05T16:49:19+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:70421", "record": "RHSA-2026:70421", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-05T16:49:19Z", "date_only": false, "value": "2026-11-05T16:49:19+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:70421", "record": "RHSA-2026:70421", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1472", "record": "CERTFR-2026-AVI-1472", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1472", "record": "CERTFR-2026-AVI-1472", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1472", "record": "CERTFR-2026-AVI-1472", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-11-12T17:10:56Z", "date_only": false, "value": "2026-11-12T17:10:56+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-12T17:10:56Z", "date_only": false, "value": "2026-11-12T17:10:56+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-12T17:10:56Z", "date_only": false, "value": "2026-11-12T17:10:56+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:34608", "record": "RHSA-2026:34608", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-14T00:22:20Z", "date_only": false, "value": "2026-11-14T00:22:20+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-14T00:22:20Z", "date_only": false, "value": "2026-11-14T00:22:20+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-14T00:22:20Z", "date_only": false, "value": "2026-11-14T00:22:20+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "document.tracking.current_release_date", "linked_record": true}], "metrics": {"as_of": "2026-11-14T03:10:48.675Z", "anchors": {"origin": {"timestamp": "2026-03-07T08:50:32.525Z", "date_only": false, "value": "2026-03-07T08:50:32.525000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.23.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": {"timestamp": "2026-03-07T09:00:57.868Z", "date_only": false, "value": "2026-03-07T09:00:57.868082+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.23.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-03-07T08:50:32.525Z", "date_only": false, "value": "2026-03-07T08:50:32.525000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.23.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": {"timestamp": "2026-04-16T15:32:09Z", "date_only": false, "value": "2026-04-16T15:32:09+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:8509", "record": "RHSA-2026:8509", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 3479471.132, "hours": 966.519758888889, "days": 40.27165662037037, "min_seconds": 3479471.132, "max_seconds": 3479471.132, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-03-07T09:00:57.868Z", "date_only": false, "value": "2026-03-07T09:00:57.868082+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.23.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-04-16T15:32:09Z", "date_only": false, "value": "2026-04-16T15:32:09+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:8509", "record": "RHSA-2026:8509", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, "discovery_after_disclosure": true}, "disclosure_to_patch": {"available": true, "seconds": 3480096.475, "hours": 966.6934652777778, "days": 40.27889438657407, "min_seconds": 3480096.475, "max_seconds": 3480096.475, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-03-07T08:50:32.525Z", "date_only": false, "value": "2026-03-07T08:50:32.525000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.23.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-04-16T15:32:09Z", "date_only": false, "value": "2026-04-16T15:32:09+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:8509", "record": "RHSA-2026:8509", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 3480096.475, "hours": 966.6934652777778, "days": 40.27889438657407, "min_seconds": 3480096.475, "max_seconds": 3480096.475, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-03-07T08:50:32.525Z", "date_only": false, "value": "2026-03-07T08:50:32.525000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:10184", "record": "RHSA-2026:10184", "field": "vulnerabilities.23.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-04-16T15:32:09Z", "date_only": false, "value": "2026-04-16T15:32:09+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:8509", "record": "RHSA-2026:8509", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}