{"metadata": {"vulnerability": "CVE-2026-41654", "count": 24, "kinds": {"milestone": 6, "sighting": 2, "kev": 0, "other": 16}}, "data": [{"timestamp": "2026-04-21T23:58:43.803Z", "date_only": false, "value": "2026-04-21T23:58:43.803Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-41654", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-04-30T17:28:41Z", "date_only": false, "value": "2026-04-30T17:28:41Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CWCX-382V-8M9G", "record": "GHSA-CWCX-382V-8M9G", "field": "published"}, {"timestamp": "2026-04-30T21:05:05.230Z", "date_only": false, "value": "2026-04-30T21:05:05.230471Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/releaseport.com/post/3mkqjcrmycr2v", "record": "CVE-2026-41654", "field": "creation_timestamp", "uuid": "6b8b8eb1-3fe9-4f0c-bc35-db8fbe79a5d3", "content": "weblate weblate-5.17.1 patches CVE-2026-41654\nPassword changes auto-regenerate API keys; integrations break unless you reconfigure.\nUpgrade carefully.\n\n\u2192 releaseport.com/r/weblateorg-weblate/weblate-5-17-1", "url": "https://bsky.app/profile/releaseport.com/post/3mkqjcrmycr2v"}, {"timestamp": "2026-05-07T13:40:12.532Z", "date_only": false, "value": "2026-05-07T13:40:12.532Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-41654", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-05-07T13:40:12.532Z", "date_only": false, "value": "2026-05-07T13:40:12.532Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-41654", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-07T15:16:07Z", "date_only": false, "value": "2026-05-07T15:16:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-CWCX-382V-8M9G", "record": "GHSA-CWCX-382V-8M9G", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-05-07T15:16:07.907Z", "date_only": false, "value": "2026-05-07T15:16:07.907", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-41654", "record": "FKIE_CVE-2026-41654", "field": "published"}, {"timestamp": "2026-05-07T15:16:07.907Z", "date_only": false, "value": "2026-05-07T15:16:07.907Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-2317", "record": "PYSEC-2026-2317", "field": "published"}, {"timestamp": "2026-05-07T18:33:13.445Z", "date_only": false, "value": "2026-05-07T18:33:13.445378Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlbu3j75fy2k", "record": "CVE-2026-41654", "field": "creation_timestamp", "uuid": "eae3007f-9503-43e8-837a-9cc554b1ff94", "content": "CVE-2026-41654 - Weblate is Vulnerable to Authenticated SSRF via Project Backup Import bypassing validate_repo_url\nCVE ID : CVE-2026-41654\n \n Published : May 7, 2026, 3:16 p.m. | 1\u00a0hour, 9\u00a0minutes ago\n \n Description : Weblate is a web based localization tool. Prior to version ...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlbu3j75fy2k"}, {"timestamp": "2026-05-08T14:23:34.840Z", "date_only": false, "value": "2026-05-08T14:23:34.840796Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-41654", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-05-08T14:23:34.840Z", "date_only": false, "value": "2026-05-08T14:23:34.840796Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-41654", "record": "FKIE_CVE-2026-41654", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-05-08T14:23:41.296Z", "date_only": false, "value": "2026-05-08T14:23:41.296Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-41654", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-05-08T14:23:41.296Z", "date_only": false, "value": "2026-05-08T14:23:41.296Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-41654", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-08T21:47:36Z", "date_only": false, "value": "2026-05-08T21:47:36Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CWCX-382V-8M9G", "record": "GHSA-CWCX-382V-8M9G", "field": "modified"}, {"timestamp": "2026-06-01T00:00:00Z", "date_only": false, "value": "2026-06-01T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10929-1", "record": "OPENSUSE-SU-2026:10929-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-01T00:00:00Z", "date_only": false, "value": "2026-06-01T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10929-1", "record": "OPENSUSE-SU-2026:10929-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-06-01T00:00:00Z", "date_only": false, "value": "2026-06-01T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10929-1", "record": "OPENSUSE-SU-2026:10929-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-01T00:00:00Z", "date_only": false, "value": "2026-06-01T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10929-1", "record": "OPENSUSE-SU-2026:10929-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-17T10:46:56.947Z", "date_only": false, "value": "2026-06-17T10:46:56.947", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-41654", "record": "FKIE_CVE-2026-41654", "field": "lastModified"}, {"timestamp": "2026-07-13T05:52:34.088Z", "date_only": false, "value": "2026-07-13T05:52:34.088366Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-2317", "record": "PYSEC-2026-2317", "field": "modified"}, {"timestamp": "2026-09-16T20:13:06Z", "date_only": false, "value": "2026-09-16T20:13:06Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10929-1", "record": "OPENSUSE-SU-2026:10929-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T21:14:42Z", "date_only": false, "value": "2026-09-16T21:14:42Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10929-1", "record": "OPENSUSE-SU-2026:10929-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-17T17:07:54Z", "date_only": false, "value": "2026-09-17T17:07:54Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10929-1", "record": "OPENSUSE-SU-2026:10929-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-17T17:07:54Z", "date_only": false, "value": "2026-09-17T17:07:54Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10929-1", "record": "OPENSUSE-SU-2026:10929-1", "field": "document.tracking.current_release_date"}]}