{"metadata": {"vulnerability": "CVE-2026-48713", "count": 24, "kinds": {"milestone": 9, "sighting": 5, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-05-22T18:47:27.755Z", "date_only": false, "value": "2026-05-22T18:47:27.755Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-48713", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-15T20:31:53.929Z", "date_only": false, "value": "2026-06-15T20:31:53.929Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-48713", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-06-15T20:31:53.929Z", "date_only": false, "value": "2026-06-15T20:31:53.929Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-48713", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-15T22:16:17Z", "date_only": false, "value": "2026-06-15T22:16:17Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2933-Q333-QG83", "record": "GHSA-2933-Q333-QG83", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-06-15T22:16:17.397Z", "date_only": false, "value": "2026-06-15T22:16:17.397", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48713", "record": "FKIE_CVE-2026-48713", "field": "published"}, {"timestamp": "2026-06-15T23:00:38.877Z", "date_only": false, "value": "2026-06-15T23:00:38.877313Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moef7r5k4a24", "record": "CVE-2026-48713", "field": "creation_timestamp", "uuid": "98231bfe-6071-4cac-8005-caedb545c339", "content": "\ud83d\udd34 CVE-2026-48713 - Critical (9.1)\n\nVersions prior to 2.6.6 are vulnerable to prototype pollution via crafted missing-key strings whe...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48713/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moef7r5k4a24"}, {"timestamp": "2026-06-16T00:01:18.938Z", "date_only": false, "value": "2026-06-16T00:01:18.938782Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moeimat47y2n", "record": "CVE-2026-48713", "field": "creation_timestamp", "uuid": "b3450ce9-76f8-46e4-bbe1-355c145b7336", "content": "CVE-2026-48713 - i18next-fs-backend: Prototype pollution via crafted missing-key string\nCVE ID : CVE-2026-48713\n \n Published : June 15, 2026, 10:16 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : Versions prior to 2.6.6 are vulnerable to prototype pollution via crafted missing-...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3moeimat47y2n"}, {"timestamp": "2026-06-16T03:00:27.776Z", "date_only": false, "value": "2026-06-16T03:00:27.776548Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3moesmlifow2c", "record": "cve-2026-48713", "field": "creation_timestamp", "uuid": "1f81b521-c5ea-4d5f-a4d9-10e831a08ed8", "content": "CRITICAL: i18next-fs-backend <2.6.6 vulnerable to prototype pollution! Patch to 2.6.6 or mitigate (restrict missingKeyHandler, disable key splitting) to prevent security bypass & crashes. More info: https://radar.offseq.com/threat/cve-2026-48713-cwe-1321-improperly-controlled-modi-6faa1b03 #OffSe...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3moesmlifow2c"}, {"timestamp": "2026-06-16T03:00:27.828Z", "date_only": false, "value": "2026-06-16T03:00:27.828334Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/116757549872056414", "record": "cve-2026-48713", "field": "creation_timestamp", "uuid": "5f124d56-57a1-4f94-84a6-c5a2b3186e8c", "content": "\ud83d\udea8 CVE-2026-48713: Prototype pollution in i18next-fs-backend <2.6.6 (CVSS 9.1, CRITICAL). Exploitable via crafted missing-key strings, leading to crashes or security bypass. Upgrade to 2.6.6 or apply mitigations now! https://radar.offseq.com/threat/cve-2026-48713-cwe-1321-improperly-controlled-modi-6faa1b03 #OffSeq #infosec #NodeJS #vuln", "url": "https://infosec.exchange/users/offseq/statuses/116757549872056414"}, {"timestamp": "2026-06-16T12:49:11.525Z", "date_only": false, "value": "2026-06-16T12:49:11.525388Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-48713", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-06-16T12:49:11.525Z", "date_only": false, "value": "2026-06-16T12:49:11.525388Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48713", "record": "FKIE_CVE-2026-48713", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-06-16T12:49:24.673Z", "date_only": false, "value": "2026-06-16T12:49:24.673Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-48713", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-16T12:49:24.673Z", "date_only": false, "value": "2026-06-16T12:49:24.673Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-48713", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-25T17:28:46Z", "date_only": false, "value": "2026-06-25T17:28:46Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2933-Q333-QG83", "record": "GHSA-2933-Q333-QG83", "field": "published"}, {"timestamp": "2026-06-25T17:28:46Z", "date_only": false, "value": "2026-06-25T17:28:46Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2933-Q333-QG83", "record": "GHSA-2933-Q333-QG83", "field": "modified"}, {"timestamp": "2026-06-29T10:07:06.876Z", "date_only": false, "value": "2026-06-29T10:07:06.876734Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpgajhqoho2u", "record": "CVE-2026-48713", "field": "creation_timestamp", "uuid": "e7e29e84-8c87-4d01-86a9-d291bb95903a", "content": "\ud83d\udccc CVE-2026-48713 - Versions prior to 2.6.6 are vulnerable to prototype pollution via crafted missing-key strings when used to persist missing translation keys (e.g. via ... https://www.cyberhub.blog/cves/CVE-2026-48713", "url": "https://bsky.app/profile/cyberhub.blog/post/3mpgajhqoho2u"}, {"timestamp": "2026-08-21T00:00:00Z", "date_only": true, "value": "2026-08-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1094", "record": "CERTFR-2026-AVI-1094", "field": "vendor_advisories.9.published_at"}, {"timestamp": "2026-08-24T00:00:00Z", "date_only": true, "value": "2026-08-24", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1094", "record": "CERTFR-2026-AVI-1094", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-08-26T00:00:00Z", "date_only": true, "value": "2026-08-26", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1094", "record": "CERTFR-2026-AVI-1094", "field": "vendor_advisories.3.published_at"}, {"timestamp": "2026-08-27T00:00:00Z", "date_only": true, "value": "2026-08-27", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1094", "record": "CERTFR-2026-AVI-1094", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-08-28T00:00:00Z", "date_only": false, "value": "2026-08-28T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1094", "record": "CERTFR-2026-AVI-1094", "field": "last_revision_date"}, {"timestamp": "2026-08-28T00:00:00Z", "date_only": true, "value": "2026-08-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1094", "record": "CERTFR-2026-AVI-1094", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2026-08-28T00:00:00Z", "date_only": false, "value": "2026-08-28T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1094", "record": "CERTFR-2026-AVI-1094", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-25T23:10:00.167Z", "date_only": false, "value": "2026-10-25T23:10:00.167", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48713", "record": "FKIE_CVE-2026-48713", "field": "lastModified"}]}