{"metadata": {"vulnerability": "CVE-2026-44006", "count": 88, "kinds": {"milestone": 6, "sighting": 5, "kev": 0, "other": 77}, "linked_omitted": 0}, "data": [{"timestamp": "2026-05-01T20:40:54Z", "date_only": false, "value": "2026-05-01T20:40:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/patriksimek/vm2/security/advisories/GHSA-qcp4-v2jj-fjx8", "record": "CVE-2026-44006", "field": "creation_timestamp", "uuid": "5546f626-22cb-417a-b220-16692f9fc653", "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-qcp4-v2jj-fjx8", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-05-03T22:00:00Z", "date_only": false, "value": "2026-05-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1349", "record": "WID-SEC-W-2026-1349", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-05-03T22:00:00Z", "date_only": false, "value": "2026-05-03T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1349", "record": "WID-SEC-W-2026-1349", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-03T22:00:00Z", "date_only": false, "value": "2026-05-03T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1349", "record": "WID-SEC-W-2026-1349", "field": "vulnerabilities.13.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-04T21:24:36.505Z", "date_only": false, "value": "2026-05-04T21:24:36.505Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-44006", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-05-04T22:00:00Z", "date_only": false, "value": "2026-05-04T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1349", "record": "WID-SEC-W-2026-1349", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-05-06T22:00:00Z", "date_only": false, "value": "2026-05-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1349", "record": "WID-SEC-W-2026-1349", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-05-07T03:54:34Z", "date_only": false, "value": "2026-05-07T03:54:34Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QCP4-V2JJ-FJX8", "record": "GHSA-QCP4-V2JJ-FJX8", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-13T17:17:54.869Z", "date_only": false, "value": "2026-05-13T17:17:54.869000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2026-05-13T17:19:44.406Z", "date_only": false, "value": "2026-05-13T17:19:44.406000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2026-05-13T17:21:22.308Z", "date_only": false, "value": "2026-05-13T17:21:22.308000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.3.release_date", "linked_record": true}, {"timestamp": "2026-05-13T17:23:35.175Z", "date_only": false, "value": "2026-05-13T17:23:35.175000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.4.release_date", "linked_record": true}, {"timestamp": "2026-05-13T17:29:00.289Z", "date_only": false, "value": "2026-05-13T17:29:00.289000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.5.release_date", "linked_record": true}, {"timestamp": "2026-05-13T17:29:42.416Z", "date_only": false, "value": "2026-05-13T17:29:42.416000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.6.release_date", "linked_record": true}, {"timestamp": "2026-05-13T17:30:38.883Z", "date_only": false, "value": "2026-05-13T17:30:38.883000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.7.release_date", "linked_record": true}, {"timestamp": "2026-05-13T17:31:16.281Z", "date_only": false, "value": "2026-05-13T17:31:16.281000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.8.release_date", "linked_record": true}, {"timestamp": "2026-05-13T17:31:54.902Z", "date_only": false, "value": "2026-05-13T17:31:54.902Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-44006", "field": "containers.adp.1.datePublic"}, {"timestamp": "2026-05-13T17:31:54.902Z", "date_only": false, "value": "2026-05-13T17:31:54.902Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-44006", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-13T17:31:54.902Z", "date_only": false, "value": "2026-05-13T17:31:54.902000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.10.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-13T17:31:54.902Z", "date_only": false, "value": "2026-05-13T17:31:54.902Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-44006", "field": "containers.adp.1.timeline.1.time", "text": "Made public."}, {"timestamp": "2026-05-13T17:31:54.902Z", "date_only": false, "value": "2026-05-13T17:31:54.902Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-44006", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-13T17:33:19.799Z", "date_only": false, "value": "2026-05-13T17:33:19.799000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.11.release_date", "linked_record": true}, {"timestamp": "2026-05-13T17:35:03.275Z", "date_only": false, "value": "2026-05-13T17:35:03.275000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.12.release_date", "linked_record": true}, {"timestamp": "2026-05-13T17:36:07.309Z", "date_only": false, "value": "2026-05-13T17:36:07.309000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.13.release_date", "linked_record": true}, {"timestamp": "2026-05-13T17:38:38.311Z", "date_only": false, "value": "2026-05-13T17:38:38.311000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.14.release_date", "linked_record": true}, {"timestamp": "2026-05-13T17:40:41.578Z", "date_only": false, "value": "2026-05-13T17:40:41.578000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.9.release_date", "linked_record": true}, {"timestamp": "2026-05-13T18:01:02.062Z", "date_only": false, "value": "2026-05-13T18:01:02.062065+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.13.discovery_date", "linked_record": true}, {"timestamp": "2026-05-13T18:01:38.304Z", "date_only": false, "value": "2026-05-13T18:01:38.304470+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.8.discovery_date", "linked_record": true}, {"timestamp": "2026-05-13T18:01:40.919Z", "date_only": false, "value": "2026-05-13T18:01:40.919988+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.3.discovery_date", "linked_record": true}, {"timestamp": "2026-05-13T18:01:43.555Z", "date_only": false, "value": "2026-05-13T18:01:43.555601+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.6.discovery_date", "linked_record": true}, {"timestamp": "2026-05-13T18:01:46.215Z", "date_only": false, "value": "2026-05-13T18:01:46.215400+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.11.discovery_date", "linked_record": true}, {"timestamp": "2026-05-13T18:01:53.155Z", "date_only": false, "value": "2026-05-13T18:01:53.155922+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.10.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-13T18:01:53.155Z", "date_only": false, "value": "2026-05-13T18:01:53.155Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-44006", "field": "containers.adp.1.timeline.0.time", "text": "Reported to Red Hat."}, {"timestamp": "2026-05-13T18:01:56.001Z", "date_only": false, "value": "2026-05-13T18:01:56.001839+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.12.discovery_date", "linked_record": true}, {"timestamp": "2026-05-13T18:01:58.992Z", "date_only": false, "value": "2026-05-13T18:01:58.992659+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.7.discovery_date", "linked_record": true}, {"timestamp": "2026-05-13T18:02:02.030Z", "date_only": false, "value": "2026-05-13T18:02:02.030205+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2026-05-13T18:02:06.005Z", "date_only": false, "value": "2026-05-13T18:02:06.005102+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.4.discovery_date", "linked_record": true}, {"timestamp": "2026-05-13T18:02:09.031Z", "date_only": false, "value": "2026-05-13T18:02:09.031334+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.9.discovery_date", "linked_record": true}, {"timestamp": "2026-05-13T18:02:11.809Z", "date_only": false, "value": "2026-05-13T18:02:11.809808+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.2.discovery_date", "linked_record": true}, {"timestamp": "2026-05-13T18:02:24.091Z", "date_only": false, "value": "2026-05-13T18:02:24.091050+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.5.discovery_date", "linked_record": true}, {"timestamp": "2026-05-13T18:02:31.159Z", "date_only": false, "value": "2026-05-13T18:02:31.159691+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.14.discovery_date", "linked_record": true}, {"timestamp": "2026-05-13T18:16:17Z", "date_only": false, "value": "2026-05-13T18:16:17Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QCP4-V2JJ-FJX8", "record": "GHSA-QCP4-V2JJ-FJX8", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-05-13T18:16:17.387Z", "date_only": false, "value": "2026-05-13T18:16:17.387", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-44006", "record": "FKIE_CVE-2026-44006", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-13T21:49:21.251Z", "date_only": false, "value": "2026-05-13T21:49:21.251112Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlrbtta76z2i", "record": "CVE-2026-44006", "field": "creation_timestamp", "uuid": "902d5336-c432-49b5-b497-cee565d3178e", "content": "CVE-2026-44006 - vm2: Sandbox Escape\nCVE ID : CVE-2026-44006\n \n Published : May 13, 2026, 6:16 p.m. | 2\u00a0hours, 9\u00a0minutes ago\n \n Description : vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, It is possible to reach BaseHandler.getPrototypeOf, which can be used to...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlrbtta76z2i"}, {"timestamp": "2026-05-14T00:00:00Z", "date_only": false, "value": "2026-05-14T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-44006", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-05-14T00:00:00Z", "date_only": false, "value": "2026-05-14T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-44006", "record": "FKIE_CVE-2026-44006", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-05-14T20:36:24Z", "date_only": false, "value": "2026-05-14T20:36:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QCP4-V2JJ-FJX8", "record": "GHSA-QCP4-V2JJ-FJX8", "field": "modified", "linked_record": true}, {"timestamp": "2026-05-14T22:00:00Z", "date_only": false, "value": "2026-05-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1349", "record": "WID-SEC-W-2026-1349", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-05-15T03:55:56.089Z", "date_only": false, "value": "2026-05-15T03:55:56.089Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-44006", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-18T14:18:11Z", "date_only": false, "value": "2026-05-18T14:18:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bdufstecru/3172", "record": "CVE-2026-44006", "field": "creation_timestamp", "uuid": "33056f0f-cc94-4aae-b55d-04296f60eedd", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 BaseHandler.getPrototypeOf() \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 vm2 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 NPM \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u0434\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-06907\nCVE-2026-44006\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://github.com/patriksimek/vm2/releases/tag/v3.11.0", "url": "https://t.me/bdufstecru/3172"}, {"timestamp": "2026-05-22T13:22:38.873Z", "date_only": false, "value": "2026-05-22T13:22:38.873000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2026-05-22T14:01:14.427Z", "date_only": false, "value": "2026-05-22T14:01:14.427751+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2026-05-31T22:00:00Z", "date_only": false, "value": "2026-05-31T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1349", "record": "WID-SEC-W-2026-1349", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2026-06-11T13:27:54Z", "date_only": false, "value": "2026-06-11T13:27:54+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.22.discovery_date", "linked_record": true}, {"timestamp": "2026-06-11T13:27:54Z", "date_only": false, "value": "2026-06-11T13:27:54+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.22.release_date", "linked_record": true}, {"timestamp": "2026-06-12T14:14:06.455Z", "date_only": false, "value": "2026-06-12T14:14:06.455000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.21.release_date", "linked_record": true}, {"timestamp": "2026-06-12T14:14:17.037Z", "date_only": false, "value": "2026-06-12T14:14:17.037000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.15.release_date", "linked_record": true}, {"timestamp": "2026-06-12T14:14:42.022Z", "date_only": false, "value": "2026-06-12T14:14:42.022000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.16.release_date", "linked_record": true}, {"timestamp": "2026-06-12T14:15:34.795Z", "date_only": false, "value": "2026-06-12T14:15:34.795000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.17.release_date", "linked_record": true}, {"timestamp": "2026-06-12T14:15:44.652Z", "date_only": false, "value": "2026-06-12T14:15:44.652000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.18.release_date", "linked_record": true}, {"timestamp": "2026-06-12T14:16:10.727Z", "date_only": false, "value": "2026-06-12T14:16:10.727000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.19.release_date", "linked_record": true}, {"timestamp": "2026-06-12T14:17:35.970Z", "date_only": false, "value": "2026-06-12T14:17:35.970000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.20.release_date", "linked_record": true}, {"timestamp": "2026-06-12T15:01:05.444Z", "date_only": false, "value": "2026-06-12T15:01:05.444374+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.20.discovery_date", "linked_record": true}, {"timestamp": "2026-06-12T15:01:11.705Z", "date_only": false, "value": "2026-06-12T15:01:11.705175+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.19.discovery_date", "linked_record": true}, {"timestamp": "2026-06-12T15:01:24.611Z", "date_only": false, "value": "2026-06-12T15:01:24.611905+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.17.discovery_date", "linked_record": true}, {"timestamp": "2026-06-12T15:01:31.104Z", "date_only": false, "value": "2026-06-12T15:01:31.104545+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.18.discovery_date", "linked_record": true}, {"timestamp": "2026-06-12T15:01:52.744Z", "date_only": false, "value": "2026-06-12T15:01:52.744009+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.15.discovery_date", "linked_record": true}, {"timestamp": "2026-06-12T15:02:02.154Z", "date_only": false, "value": "2026-06-12T15:02:02.154869+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.16.discovery_date", "linked_record": true}, {"timestamp": "2026-06-12T15:02:05.339Z", "date_only": false, "value": "2026-06-12T15:02:05.339635+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.21.discovery_date", "linked_record": true}, {"timestamp": "2026-06-16T22:00:00Z", "date_only": false, "value": "2026-06-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1349", "record": "WID-SEC-W-2026-1349", "field": "document.tracking.revision_history.5.date", "linked_record": true}, {"timestamp": "2026-06-16T22:00:00Z", "date_only": false, "value": "2026-06-16T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1349", "record": "WID-SEC-W-2026-1349", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-06-17T09:01:01.290Z", "date_only": false, "value": "2026-06-17T09:01:01.290+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1349", "record": "WID-SEC-W-2026-1349", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-07-08T15:28:07.696Z", "date_only": false, "value": "2026-07-08T15:28:07.696000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.24.release_date", "linked_record": true}, {"timestamp": "2026-07-08T16:01:54.459Z", "date_only": false, "value": "2026-07-08T16:01:54.459482+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.24.discovery_date", "linked_record": true}, {"timestamp": "2026-07-09T07:40:04.913Z", "date_only": false, "value": "2026-07-09T07:40:04.913853Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq74xrar6422", "record": "CVE-2026-44006", "field": "creation_timestamp", "uuid": "8494a1f3-9a97-4792-b9ed-b670b6f6672e", "content": "CVE-2026-44006 - @rootio/vm2\nThe @rootio/vm2 package in Root:npm has a memory access issue that could be exploited by attackers. This could lead to unauthorized data access or system crashes. Update to a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rootio #Rootnpm #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mq74xrar6422"}, {"timestamp": "2026-07-14T20:03:56.430Z", "date_only": false, "value": "2026-07-14T20:03:56.430000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.23.release_date", "linked_record": true}, {"timestamp": "2026-07-14T21:02:55.149Z", "date_only": false, "value": "2026-07-14T21:02:55.149976+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.23.discovery_date", "linked_record": true}, {"timestamp": "2026-08-05T16:35:19Z", "date_only": false, "value": "2026-08-05T16:35:19+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-08-05T16:35:19Z", "date_only": false, "value": "2026-08-05T16:35:19+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-05T16:35:19Z", "date_only": false, "value": "2026-08-05T16:35:19+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.10.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-04T00:36:24Z", "date_only": false, "value": "2026-09-04T00:36:24+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-07T12:04:57.052Z", "date_only": false, "value": "2026-09-07T12:04:57.052Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-44006", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-07T12:04:57.052Z", "date_only": false, "value": "2026-09-07T12:04:57.052Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-44006", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-12T10:00:05.286Z", "date_only": false, "value": "2026-09-12T10:00:05.286819Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/shimiscyberworld/1460", "record": "CVE-2026-44006", "field": "creation_timestamp", "uuid": "7f25664a-d83e-41c4-ac02-e07b83f357ec", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-44006 \u2014 CVSS 10\nvm2 Sandbox Escape (CVE-2026-44006) Poses Critical Threat to Node.js\n\nCVE-2026-44006 \u2014 vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, It is possible to reach BaseHandler.getPrototypeOf, which can be used to get arbitrary prototypes. T\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-44006 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "url": "https://t.me/shimiscyberworld/1460"}, {"timestamp": "2026-10-26T17:10:03.270Z", "date_only": false, "value": "2026-10-26T17:10:03.270", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-44006", "record": "FKIE_CVE-2026-44006", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-13T13:38:07Z", "date_only": false, "value": "2026-11-13T13:38:07+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-13T13:38:07Z", "date_only": false, "value": "2026-11-13T13:38:07+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-13T13:38:07Z", "date_only": false, "value": "2026-11-13T13:38:07+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "document.tracking.current_release_date", "linked_record": true}], "metrics": {"as_of": "2026-11-14T04:03:51.132Z", "anchors": {"origin": {"timestamp": "2026-05-03T22:00:00Z", "date_only": false, "value": "2026-05-03T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1349", "record": "WID-SEC-W-2026-1349", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": {"timestamp": "2026-05-13T18:01:53.155Z", "date_only": false, "value": "2026-05-13T18:01:53.155922+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.10.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-05-03T22:00:00Z", "date_only": false, "value": "2026-05-03T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1349", "record": "WID-SEC-W-2026-1349", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2026-05-01T20:40:54Z", "date_only": false, "value": "2026-05-01T20:40:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/patriksimek/vm2/security/advisories/GHSA-qcp4-v2jj-fjx8", "record": "CVE-2026-44006", "field": "creation_timestamp", "uuid": "5546f626-22cb-417a-b220-16692f9fc653", "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-qcp4-v2jj-fjx8", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": {"timestamp": "2026-08-05T16:35:19Z", "date_only": false, "value": "2026-08-05T16:35:19+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.10.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": -177546.0, "hours": -49.318333333333335, "days": -2.0549305555555555, "min_seconds": -177546.0, "max_seconds": -177546.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2026-05-03T22:00:00Z", "date_only": false, "value": "2026-05-03T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1349", "record": "WID-SEC-W-2026-1349", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-05-01T20:40:54Z", "date_only": false, "value": "2026-05-01T20:40:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/patriksimek/vm2/security/advisories/GHSA-qcp4-v2jj-fjx8", "record": "CVE-2026-44006", "field": "creation_timestamp", "uuid": "5546f626-22cb-417a-b220-16692f9fc653", "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-qcp4-v2jj-fjx8", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 7252405.845, "hours": 2014.5571791666666, "days": 83.93988246527778, "min_seconds": 7252405.845, "max_seconds": 7252405.845, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-13T18:01:53.155Z", "date_only": false, "value": "2026-05-13T18:01:53.155922+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.10.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-08-05T16:35:19Z", "date_only": false, "value": "2026-08-05T16:35:19+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.10.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, "discovery_after_disclosure": true}, "disclosure_to_patch": {"available": true, "seconds": 8102119.0, "hours": 2250.5886111111113, "days": 93.77452546296297, "min_seconds": 8102119.0, "max_seconds": 8102119.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-03T22:00:00Z", "date_only": false, "value": "2026-05-03T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1349", "record": "WID-SEC-W-2026-1349", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-08-05T16:35:19Z", "date_only": false, "value": "2026-08-05T16:35:19+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.10.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 8102119.0, "hours": 2250.5886111111113, "days": 93.77452546296297, "min_seconds": 8102119.0, "max_seconds": 8102119.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-03T22:00:00Z", "date_only": false, "value": "2026-05-03T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1349", "record": "WID-SEC-W-2026-1349", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-08-05T16:35:19Z", "date_only": false, "value": "2026-08-05T16:35:19+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.10.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 8279665.0, "hours": 2299.9069444444444, "days": 95.82945601851851, "min_seconds": 8279665.0, "max_seconds": 8279665.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-01T20:40:54Z", "date_only": false, "value": "2026-05-01T20:40:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/patriksimek/vm2/security/advisories/GHSA-qcp4-v2jj-fjx8", "record": "CVE-2026-44006", "field": "creation_timestamp", "uuid": "5546f626-22cb-417a-b220-16692f9fc653", "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-qcp4-v2jj-fjx8", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-08-05T16:35:19Z", "date_only": false, "value": "2026-08-05T16:35:19+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:50850", "record": "RHSA-2026:50850", "field": "vulnerabilities.10.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}}}