{"metadata": {"vulnerability": "CVE-2026-49272", "count": 71, "kinds": {"milestone": 33, "sighting": 2, "kev": 0, "other": 36}}, "data": [{"timestamp": "2026-05-28T20:07:58.860Z", "date_only": false, "value": "2026-05-28T20:07:58.860Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-49272", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-23T22:25:13Z", "date_only": false, "value": "2026-10-23T22:25:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/oauthlib/oauthlib/security/advisories/GHSA-3jp2-3mrg-2vxc", "record": "CVE-2026-49272", "field": "creation_timestamp", "uuid": "08623f7d-9893-4ca6-94d8-45345655c255", "url": "https://github.com/oauthlib/oauthlib/security/advisories/GHSA-3jp2-3mrg-2vxc", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-27T13:30:17Z", "date_only": false, "value": "2026-10-27T13:30:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3JP2-3MRG-2VXC", "record": "GHSA-3JP2-3MRG-2VXC", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-27T19:32:53Z", "date_only": false, "value": "2026-10-27T19:32:53Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-CHARMCRAFT-CVE-2026-49272", "record": "BREW-CHARMCRAFT-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-27T19:35:31Z", "date_only": false, "value": "2026-10-27T19:35:31Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-GCALCLI-CVE-2026-49272", "record": "BREW-GCALCLI-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T08:37:24Z", "date_only": false, "value": "2026-10-28T08:37:24Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-ANSIBLE@12-CVE-2026-49272", "record": "BREW-ANSIBLE@12-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T08:37:42Z", "date_only": false, "value": "2026-10-28T08:37:42Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-ANSIBLE@9-CVE-2026-49272", "record": "BREW-ANSIBLE@9-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T08:38:06Z", "date_only": false, "value": "2026-10-28T08:38:06Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-APPRISE-CVE-2026-49272", "record": "BREW-APPRISE-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T08:40:15Z", "date_only": false, "value": "2026-10-28T08:40:15Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-EVERNOTE-BACKUP-CVE-2026-49272", "record": "BREW-EVERNOTE-BACKUP-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T08:41:17Z", "date_only": false, "value": "2026-10-28T08:41:17Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-DUPLICITY-CVE-2026-49272", "record": "BREW-DUPLICITY-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T08:43:24Z", "date_only": false, "value": "2026-10-28T08:43:24Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-DSTACK-CVE-2026-49272", "record": "BREW-DSTACK-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T08:44:12Z", "date_only": false, "value": "2026-10-28T08:44:12Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-ANSIBLE-CVE-2026-49272", "record": "BREW-ANSIBLE-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T08:52:40Z", "date_only": false, "value": "2026-10-28T08:52:40Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-SICKCHILL-CVE-2026-49272", "record": "BREW-SICKCHILL-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T08:54:21Z", "date_only": false, "value": "2026-10-28T08:54:21Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-S3QL-CVE-2026-49272", "record": "BREW-S3QL-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T08:56:13Z", "date_only": false, "value": "2026-10-28T08:56:13Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-MCP-GOOGLE-SHEETS-CVE-2026-49272", "record": "BREW-MCP-GOOGLE-SHEETS-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T08:58:55Z", "date_only": false, "value": "2026-10-28T08:58:55Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-ANSIBLE@10-CVE-2026-49272", "record": "BREW-ANSIBLE@10-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T09:04:18Z", "date_only": false, "value": "2026-10-28T09:04:18Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-ROCKCRAFT-CVE-2026-49272", "record": "BREW-ROCKCRAFT-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T09:17:47Z", "date_only": false, "value": "2026-10-28T09:17:47Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-DVC-CVE-2026-49272", "record": "BREW-DVC-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T09:17:48Z", "date_only": false, "value": "2026-10-28T09:17:48Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-GGSHIELD-CVE-2026-49272", "record": "BREW-GGSHIELD-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T09:18:31Z", "date_only": false, "value": "2026-10-28T09:18:31Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-HERMES-AGENT-CVE-2026-49272", "record": "BREW-HERMES-AGENT-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T09:21:39Z", "date_only": false, "value": "2026-10-28T09:21:39Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-ANSIBLE@13-CVE-2026-49272", "record": "BREW-ANSIBLE@13-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T09:24:40Z", "date_only": false, "value": "2026-10-28T09:24:40Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-CONFLUENCE-MARKDOWN-EXPORTER-CVE-2026-49272", "record": "BREW-CONFLUENCE-MARKDOWN-EXPORTER-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T09:25:02Z", "date_only": false, "value": "2026-10-28T09:25:02Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-MCP-ATLASSIAN-CVE-2026-49272", "record": "BREW-MCP-ATLASSIAN-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T09:25:35Z", "date_only": false, "value": "2026-10-28T09:25:35Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-GYB-CVE-2026-49272", "record": "BREW-GYB-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T09:30:47Z", "date_only": false, "value": "2026-10-28T09:30:47Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-PARSEDMARC-CVE-2026-49272", "record": "BREW-PARSEDMARC-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T09:46:37Z", "date_only": false, "value": "2026-10-28T09:46:37Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-PROWLER-CVE-2026-49272", "record": "BREW-PROWLER-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T09:58:27Z", "date_only": false, "value": "2026-10-28T09:58:27Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-SCOUTSUITE-CVE-2026-49272", "record": "BREW-SCOUTSUITE-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T10:14:22Z", "date_only": false, "value": "2026-10-28T10:14:22Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-TWARC-CVE-2026-49272", "record": "BREW-TWARC-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T10:24:18Z", "date_only": false, "value": "2026-10-28T10:24:18Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-SNAPCRAFT-CVE-2026-49272", "record": "BREW-SNAPCRAFT-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T10:49:20Z", "date_only": false, "value": "2026-10-28T10:49:20Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-VDIRSYNCER-CVE-2026-49272", "record": "BREW-VDIRSYNCER-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-02T05:44:57Z", "date_only": false, "value": "2026-11-02T05:44:57Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-TP84091", "record": "CLEANSTART-2026-TP84091", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-02T21:30:34Z", "date_only": false, "value": "2026-11-02T21:30:34Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-ANSIBLE@10-CVE-2026-49272", "record": "BREW-ANSIBLE@10-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-02T21:30:34Z", "date_only": false, "value": "2026-11-02T21:30:34Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-ANSIBLE@13-CVE-2026-49272", "record": "BREW-ANSIBLE@13-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-02T21:30:34Z", "date_only": false, "value": "2026-11-02T21:30:34Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-ANSIBLE@9-CVE-2026-49272", "record": "BREW-ANSIBLE@9-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-02T21:30:34Z", "date_only": false, "value": "2026-11-02T21:30:34Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-VDIRSYNCER-CVE-2026-49272", "record": "BREW-VDIRSYNCER-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-03T00:42:15.921Z", "date_only": false, "value": "2026-11-03T00:42:15.921416Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-TP84091", "record": "CLEANSTART-2026-TP84091", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-04T04:47:10Z", "date_only": false, "value": "2026-11-04T04:47:10Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-CONFLUENCE-MARKDOWN-EXPORTER-CVE-2026-49272", "record": "BREW-CONFLUENCE-MARKDOWN-EXPORTER-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-05T20:58:00.517Z", "date_only": false, "value": "2026-11-05T20:58:00.517Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-49272", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-05T20:58:00.517Z", "date_only": false, "value": "2026-11-05T20:58:00.517Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-49272", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-05T20:58:32Z", "date_only": false, "value": "2026-11-05T20:58:32Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3JP2-3MRG-2VXC", "record": "GHSA-3JP2-3MRG-2VXC", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-05T21:04:16.792Z", "date_only": false, "value": "2026-11-05T21:04:16.792516Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117565859838469541", "record": "CVE-2026-49272", "field": "creation_timestamp", "uuid": "fbe61b97-558e-4a6f-a193-b0b6dd3e5e6a", "content": "CVE-2026-49272 OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflow OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.3.0 until 4.0.1, OAuthLib's RFC 8628 device workflow does not require DeviceCodeGrant.validate_token_request to check that the device_code parameter is present and valid. A caller whose client request is accepted by the configured validator and who knows a valid client ID enabled for the device workflow can submit a missing or bogus device code to the token endpoint and obtain a bearer token without completing device authorization. This issue is fixed in version 4.0.1.\nhttps://www.cve.org/CVERecord?id=CVE-2026-49272https://github.com/oauthlib/oauthlib/security/advisories/GHSA-3jp2-3mrg-2vxchttps://github.com/oauthlib/oauthlib/pull/954https://github.com/oauthlib/oauthlib/commit/77a5f1c8ce00da2b0b8c5f6e9cc129920085f114https://github.com/oauthlib/oauthlib/releases/tag/v4.0.1#oauthlib#CVE_2026_49272#bot", "url": "https://infosec.exchange/users/cve/statuses/117565859838469541"}, {"timestamp": "2026-11-05T21:14:28.774Z", "date_only": false, "value": "2026-11-05T21:14:28.774870Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-49272", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-11-05T21:14:28.774Z", "date_only": false, "value": "2026-11-05T21:14:28.774870Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-49272", "record": "FKIE_CVE-2026-49272", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-05T21:14:43.982Z", "date_only": false, "value": "2026-11-05T21:14:43.982Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-49272", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-05T21:14:43.982Z", "date_only": false, "value": "2026-11-05T21:14:43.982Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-49272", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-05T21:18:50.447Z", "date_only": false, "value": "2026-11-05T21:18:50.447", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-49272", "record": "FKIE_CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-05T22:18:44.593Z", "date_only": false, "value": "2026-11-05T22:18:44.593", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-49272", "record": "FKIE_CVE-2026-49272", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-49272", "record": "UBUNTU-CVE-2026-49272", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-49272", "record": "UBUNTU-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-08T08:39:42Z", "date_only": false, "value": "2026-11-08T08:39:42Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-ANSIBLE@12-CVE-2026-49272", "record": "BREW-ANSIBLE@12-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-08T10:21:11Z", "date_only": false, "value": "2026-11-08T10:21:11Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-GYB-CVE-2026-49272", "record": "BREW-GYB-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-08T10:36:52Z", "date_only": false, "value": "2026-11-08T10:36:52Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-GGSHIELD-CVE-2026-49272", "record": "BREW-GGSHIELD-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-08T10:42:34Z", "date_only": false, "value": "2026-11-08T10:42:34Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-PARSEDMARC-CVE-2026-49272", "record": "BREW-PARSEDMARC-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-09T06:49:22Z", "date_only": false, "value": "2026-11-09T06:49:22Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-ANSIBLE-CVE-2026-49272", "record": "BREW-ANSIBLE-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-09T06:49:22Z", "date_only": false, "value": "2026-11-09T06:49:22Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-APPRISE-CVE-2026-49272", "record": "BREW-APPRISE-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-09T06:49:22Z", "date_only": false, "value": "2026-11-09T06:49:22Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-CHARMCRAFT-CVE-2026-49272", "record": "BREW-CHARMCRAFT-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-09T06:49:22Z", "date_only": false, "value": "2026-11-09T06:49:22Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-DSTACK-CVE-2026-49272", "record": "BREW-DSTACK-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-09T06:49:22Z", "date_only": false, "value": "2026-11-09T06:49:22Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-DUPLICITY-CVE-2026-49272", "record": "BREW-DUPLICITY-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-09T06:49:22Z", "date_only": false, "value": "2026-11-09T06:49:22Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-DVC-CVE-2026-49272", "record": "BREW-DVC-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-09T06:49:22Z", "date_only": false, "value": "2026-11-09T06:49:22Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-EVERNOTE-BACKUP-CVE-2026-49272", "record": "BREW-EVERNOTE-BACKUP-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-09T06:49:22Z", "date_only": false, "value": "2026-11-09T06:49:22Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-GCALCLI-CVE-2026-49272", "record": "BREW-GCALCLI-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-09T06:49:22Z", "date_only": false, "value": "2026-11-09T06:49:22Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-HERMES-AGENT-CVE-2026-49272", "record": "BREW-HERMES-AGENT-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-09T06:49:22Z", "date_only": false, "value": "2026-11-09T06:49:22Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-MCP-ATLASSIAN-CVE-2026-49272", "record": "BREW-MCP-ATLASSIAN-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-09T06:49:22Z", "date_only": false, "value": "2026-11-09T06:49:22Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-MCP-GOOGLE-SHEETS-CVE-2026-49272", "record": "BREW-MCP-GOOGLE-SHEETS-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-09T06:49:22Z", "date_only": false, "value": "2026-11-09T06:49:22Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-PROWLER-CVE-2026-49272", "record": "BREW-PROWLER-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-09T06:49:22Z", "date_only": false, "value": "2026-11-09T06:49:22Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-ROCKCRAFT-CVE-2026-49272", "record": "BREW-ROCKCRAFT-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-09T06:49:22Z", "date_only": false, "value": "2026-11-09T06:49:22Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-S3QL-CVE-2026-49272", "record": "BREW-S3QL-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-09T06:49:22Z", "date_only": false, "value": "2026-11-09T06:49:22Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-SCOUTSUITE-CVE-2026-49272", "record": "BREW-SCOUTSUITE-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-09T06:49:22Z", "date_only": false, "value": "2026-11-09T06:49:22Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-SICKCHILL-CVE-2026-49272", "record": "BREW-SICKCHILL-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-09T06:49:22Z", "date_only": false, "value": "2026-11-09T06:49:22Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-SNAPCRAFT-CVE-2026-49272", "record": "BREW-SNAPCRAFT-CVE-2026-49272", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-09T06:49:22Z", "date_only": false, "value": "2026-11-09T06:49:22Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-TWARC-CVE-2026-49272", "record": "BREW-TWARC-CVE-2026-49272", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-09T09:46:07.436Z", "anchors": {"origin": {"timestamp": "2026-10-27T13:30:17Z", "date_only": false, "value": "2026-10-27T13:30:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3JP2-3MRG-2VXC", "record": "GHSA-3JP2-3MRG-2VXC", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-27T13:30:17Z", "date_only": false, "value": "2026-10-27T13:30:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3JP2-3MRG-2VXC", "record": "GHSA-3JP2-3MRG-2VXC", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2026-10-23T22:25:13Z", "date_only": false, "value": "2026-10-23T22:25:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/oauthlib/oauthlib/security/advisories/GHSA-3jp2-3mrg-2vxc", "record": "CVE-2026-49272", "field": "creation_timestamp", "uuid": "08623f7d-9893-4ca6-94d8-45345655c255", "url": "https://github.com/oauthlib/oauthlib/security/advisories/GHSA-3jp2-3mrg-2vxc", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": -313504.0, "hours": -87.08444444444444, "days": -3.6285185185185185, "min_seconds": -313504.0, "max_seconds": -313504.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2026-10-27T13:30:17Z", "date_only": false, "value": "2026-10-27T13:30:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3JP2-3MRG-2VXC", "record": "GHSA-3JP2-3MRG-2VXC", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-10-23T22:25:13Z", "date_only": false, "value": "2026-10-23T22:25:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/oauthlib/oauthlib/security/advisories/GHSA-3jp2-3mrg-2vxc", "record": "CVE-2026-49272", "field": "creation_timestamp", "uuid": "08623f7d-9893-4ca6-94d8-45345655c255", "url": "https://github.com/oauthlib/oauthlib/security/advisories/GHSA-3jp2-3mrg-2vxc", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 1109750.436848, "hours": 308.26401023555553, "days": 12.844333759814814, "min_seconds": 1109750.436848, "max_seconds": 1109750.436848, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-27T13:30:17Z", "date_only": false, "value": "2026-10-27T13:30:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3JP2-3MRG-2VXC", "record": "GHSA-3JP2-3MRG-2VXC", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-09T09:46:07.436Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 1423254.436848, "hours": 395.34845468, "days": 16.47285227833333, "min_seconds": 1423254.436848, "max_seconds": 1423254.436848, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-23T22:25:13Z", "date_only": false, "value": "2026-10-23T22:25:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/oauthlib/oauthlib/security/advisories/GHSA-3jp2-3mrg-2vxc", "record": "CVE-2026-49272", "field": "creation_timestamp", "uuid": "08623f7d-9893-4ca6-94d8-45345655c255", "url": "https://github.com/oauthlib/oauthlib/security/advisories/GHSA-3jp2-3mrg-2vxc", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-09T09:46:07.436Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}