{"metadata": {"vulnerability": "CVE-2026-55971", "count": 248, "kinds": {"milestone": 13, "sighting": 4, "kev": 0, "other": 231}}, "data": [{"timestamp": "2023-11-03T00:00:00Z", "date_only": false, "value": "2023-11-03T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-11-24T00:00:00Z", "date_only": false, "value": "2023-11-24T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2024-05-08T00:00:00Z", "date_only": false, "value": "2024-05-08T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2024-05-14T00:00:00Z", "date_only": false, "value": "2024-05-14T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2025-06-16T00:00:00Z", "date_only": false, "value": "2025-06-16T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2025-06-16T05:33:22.955Z", "date_only": false, "value": "2025-06-16T05:33:22.955000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2025-08-04T00:00:00Z", "date_only": false, "value": "2025-08-04T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2025-09-24T12:46:50.095Z", "date_only": false, "value": "2025-09-24T12:46:50.095000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2025-12-05T00:00:00Z", "date_only": false, "value": "2025-12-05T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2025-12-05T08:35:24.744Z", "date_only": false, "value": "2025-12-05T08:35:24.744000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2025-12-11T00:00:00Z", "date_only": false, "value": "2025-12-11T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2025-12-11T06:22:59.701Z", "date_only": false, "value": "2025-12-11T06:22:59.701000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-03-09T14:02:09.783Z", "date_only": false, "value": "2026-03-09T14:02:09.783000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-03-18T00:00:00Z", "date_only": false, "value": "2026-03-18T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.25.release_date"}, {"timestamp": "2026-03-18T19:01:41.415Z", "date_only": false, "value": "2026-03-18T19:01:41.415027+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.25.discovery_date"}, {"timestamp": "2026-03-23T21:03:56.120Z", "date_only": false, "value": "2026-03-23T21:03:56.120000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.26.release_date"}, {"timestamp": "2026-03-23T22:01:54.593Z", "date_only": false, "value": "2026-03-23T22:01:54.593547+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.26.discovery_date"}, {"timestamp": "2026-03-24T05:35:59.740Z", "date_only": false, "value": "2026-03-24T05:35:59.740000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.30.discovery_date"}, {"timestamp": "2026-03-24T05:38:09.899Z", "date_only": false, "value": "2026-03-24T05:38:09.899000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.31.discovery_date"}, {"timestamp": "2026-03-24T14:23:23.826Z", "date_only": false, "value": "2026-03-24T14:23:23.826000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-03-24T14:33:35.730Z", "date_only": false, "value": "2026-03-24T14:33:35.730000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-03-25T02:59:10.179Z", "date_only": false, "value": "2026-03-25T02:59:10.179000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.27.discovery_date"}, {"timestamp": "2026-03-26T00:00:00Z", "date_only": false, "value": "2026-03-26T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.67.release_date"}, {"timestamp": "2026-03-26T06:56:21.213Z", "date_only": false, "value": "2026-03-26T06:56:21.213270+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-03-26T16:48:54.174Z", "date_only": false, "value": "2026-03-26T16:48:54.174000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.28.release_date"}, {"timestamp": "2026-03-26T16:51:58.289Z", "date_only": false, "value": "2026-03-26T16:51:58.289000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.29.release_date"}, {"timestamp": "2026-03-26T18:01:55.592Z", "date_only": false, "value": "2026-03-26T18:01:55.592413+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.28.discovery_date"}, {"timestamp": "2026-03-26T18:02:51.339Z", "date_only": false, "value": "2026-03-26T18:02:51.339603+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.29.discovery_date"}, {"timestamp": "2026-03-27T00:00:00Z", "date_only": false, "value": "2026-03-27T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.68.release_date"}, {"timestamp": "2026-04-02T16:30:59.615Z", "date_only": false, "value": "2026-04-02T16:30:59.615000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.35.release_date"}, {"timestamp": "2026-04-02T16:44:27.806Z", "date_only": false, "value": "2026-04-02T16:44:27.806000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.36.release_date"}, {"timestamp": "2026-04-02T16:52:53.623Z", "date_only": false, "value": "2026-04-02T16:52:53.623000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.37.release_date"}, {"timestamp": "2026-04-02T16:57:31.073Z", "date_only": false, "value": "2026-04-02T16:57:31.073000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.38.release_date"}, {"timestamp": "2026-04-02T17:01:07.052Z", "date_only": false, "value": "2026-04-02T17:01:07.052864+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.35.discovery_date"}, {"timestamp": "2026-04-02T17:08:15.628Z", "date_only": false, "value": "2026-04-02T17:08:15.628000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.39.release_date"}, {"timestamp": "2026-04-02T18:01:25.983Z", "date_only": false, "value": "2026-04-02T18:01:25.983089+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.39.discovery_date"}, {"timestamp": "2026-04-02T18:01:38.952Z", "date_only": false, "value": "2026-04-02T18:01:38.952994+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.37.discovery_date"}, {"timestamp": "2026-04-02T18:02:01.536Z", "date_only": false, "value": "2026-04-02T18:02:01.536010+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.38.discovery_date"}, {"timestamp": "2026-04-02T18:02:24.149Z", "date_only": false, "value": "2026-04-02T18:02:24.149353+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.36.discovery_date"}, {"timestamp": "2026-04-03T00:00:00Z", "date_only": false, "value": "2026-04-03T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.70.release_date"}, {"timestamp": "2026-04-06T00:00:00Z", "date_only": false, "value": "2026-04-06T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-04-06T15:16:48.809Z", "date_only": false, "value": "2026-04-06T15:16:48.809000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.33.release_date"}, {"timestamp": "2026-04-06T15:31:57.602Z", "date_only": false, "value": "2026-04-06T15:31:57.602000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.32.release_date"}, {"timestamp": "2026-04-06T16:02:10.004Z", "date_only": false, "value": "2026-04-06T16:02:10.004743+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.33.discovery_date"}, {"timestamp": "2026-04-06T16:02:38.673Z", "date_only": false, "value": "2026-04-06T16:02:38.673068+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.32.discovery_date"}, {"timestamp": "2026-04-06T17:54:42.779Z", "date_only": false, "value": "2026-04-06T17:54:42.779000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.34.release_date"}, {"timestamp": "2026-04-06T19:01:00.182Z", "date_only": false, "value": "2026-04-06T19:01:00.182513+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.34.discovery_date"}, {"timestamp": "2026-04-07T00:00:00Z", "date_only": false, "value": "2026-04-07T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.27.release_date"}, {"timestamp": "2026-04-08T00:00:00Z", "date_only": false, "value": "2026-04-08T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.72.release_date"}, {"timestamp": "2026-04-13T17:15:47.606Z", "date_only": false, "value": "2026-04-13T17:15:47.606000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.13.release_date"}, {"timestamp": "2026-04-13T18:01:31.970Z", "date_only": false, "value": "2026-04-13T18:01:31.970255+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.13.discovery_date"}, {"timestamp": "2026-04-13T21:52:19.036Z", "date_only": false, "value": "2026-04-13T21:52:19.036000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-04-13T22:01:38.006Z", "date_only": false, "value": "2026-04-13T22:01:38.006388+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-04-13T22:18:56.252Z", "date_only": false, "value": "2026-04-13T22:18:56.252000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.40.release_date"}, {"timestamp": "2026-04-13T23:01:01.219Z", "date_only": false, "value": "2026-04-13T23:01:01.219840+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.40.discovery_date"}, {"timestamp": "2026-04-13T23:40:12.693Z", "date_only": false, "value": "2026-04-13T23:40:12.693000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.41.release_date"}, {"timestamp": "2026-04-14T00:01:04.003Z", "date_only": false, "value": "2026-04-14T00:01:04.003115+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.41.discovery_date"}, {"timestamp": "2026-04-16T00:00:00Z", "date_only": false, "value": "2026-04-16T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.20.release_date"}, {"timestamp": "2026-04-20T20:55:41.170Z", "date_only": false, "value": "2026-04-20T20:55:41.170000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2026-04-20T21:01:35.403Z", "date_only": false, "value": "2026-04-20T21:01:35.403778+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2026-04-21T23:19:41Z", "date_only": false, "value": "2026-04-21T23:19:41+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.59.discovery_date"}, {"timestamp": "2026-04-21T23:20:23Z", "date_only": false, "value": "2026-04-21T23:20:23+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.16.discovery_date"}, {"timestamp": "2026-04-22T23:09:35Z", "date_only": false, "value": "2026-04-22T23:09:35+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.15.discovery_date"}, {"timestamp": "2026-04-23T04:30:26.124Z", "date_only": false, "value": "2026-04-23T04:30:26.124000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.45.release_date"}, {"timestamp": "2026-04-23T05:00:56.113Z", "date_only": false, "value": "2026-04-23T05:00:56.113348+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.45.discovery_date"}, {"timestamp": "2026-04-24T16:51:39.657Z", "date_only": false, "value": "2026-04-24T16:51:39.657000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.44.release_date"}, {"timestamp": "2026-04-24T18:01:49.275Z", "date_only": false, "value": "2026-04-24T18:01:49.275019+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.44.discovery_date"}, {"timestamp": "2026-04-28T00:00:00Z", "date_only": false, "value": "2026-04-28T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.42.release_date"}, {"timestamp": "2026-04-28T07:01:37.543Z", "date_only": false, "value": "2026-04-28T07:01:37.543641+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.42.discovery_date"}, {"timestamp": "2026-04-29T00:00:00Z", "date_only": false, "value": "2026-04-29T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2026-04-30T17:26:28.969Z", "date_only": false, "value": "2026-04-30T17:26:28.969000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-04-30T17:28:41.473Z", "date_only": false, "value": "2026-04-30T17:28:41.473000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.30.release_date"}, {"timestamp": "2026-05-04T08:53:59.249Z", "date_only": false, "value": "2026-05-04T08:53:59.249000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.31.release_date"}, {"timestamp": "2026-05-06T16:32:32.382Z", "date_only": false, "value": "2026-05-06T16:32:32.382000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.46.discovery_date"}, {"timestamp": "2026-05-06T16:57:37.044Z", "date_only": false, "value": "2026-05-06T16:57:37.044000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.47.discovery_date"}, {"timestamp": "2026-05-06T19:06:25.319Z", "date_only": false, "value": "2026-05-06T19:06:25.319000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.48.discovery_date"}, {"timestamp": "2026-05-06T19:16:02.753Z", "date_only": false, "value": "2026-05-06T19:16:02.753000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.49.discovery_date"}, {"timestamp": "2026-05-06T19:47:00.134Z", "date_only": false, "value": "2026-05-06T19:47:00.134000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.50.discovery_date"}, {"timestamp": "2026-05-06T19:50:31.302Z", "date_only": false, "value": "2026-05-06T19:50:31.302000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-05-06T19:51:54.069Z", "date_only": false, "value": "2026-05-06T19:51:54.069000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.51.discovery_date"}, {"timestamp": "2026-05-07T03:58:09.483Z", "date_only": false, "value": "2026-05-07T03:58:09.483000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.43.release_date"}, {"timestamp": "2026-05-07T04:01:59.602Z", "date_only": false, "value": "2026-05-07T04:01:59.602000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.53.release_date"}, {"timestamp": "2026-05-07T05:01:36.385Z", "date_only": false, "value": "2026-05-07T05:01:36.385532+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.43.discovery_date"}, {"timestamp": "2026-05-07T05:02:12.164Z", "date_only": false, "value": "2026-05-07T05:02:12.164992+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.53.discovery_date"}, {"timestamp": "2026-05-07T10:50:28.379Z", "date_only": false, "value": "2026-05-07T10:50:28.379000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.52.discovery_date"}, {"timestamp": "2026-05-07T11:02:44.331Z", "date_only": false, "value": "2026-05-07T11:02:44.331000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-05-13T15:17:12.611Z", "date_only": false, "value": "2026-05-13T15:17:12.611000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.55.release_date"}, {"timestamp": "2026-05-13T15:20:24.588Z", "date_only": false, "value": "2026-05-13T15:20:24.588000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.54.release_date"}, {"timestamp": "2026-05-13T17:01:01.083Z", "date_only": false, "value": "2026-05-13T17:01:01.083841+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.55.discovery_date"}, {"timestamp": "2026-05-13T17:01:41.663Z", "date_only": false, "value": "2026-05-13T17:01:41.663622+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.54.discovery_date"}, {"timestamp": "2026-05-14T13:00:12.497Z", "date_only": false, "value": "2026-05-14T13:00:12.497000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.14.release_date"}, {"timestamp": "2026-05-14T14:01:31.087Z", "date_only": false, "value": "2026-05-14T14:01:31.087667+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.14.discovery_date"}, {"timestamp": "2026-05-15T14:57:31.872Z", "date_only": false, "value": "2026-05-15T14:57:31.872000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.56.release_date"}, {"timestamp": "2026-05-15T16:00:58.827Z", "date_only": false, "value": "2026-05-15T16:00:58.827425+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.56.discovery_date"}, {"timestamp": "2026-05-24T00:00:00Z", "date_only": false, "value": "2026-05-24T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.21.release_date"}, {"timestamp": "2026-05-26T16:07:55.363Z", "date_only": false, "value": "2026-05-26T16:07:55.363000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.59.release_date"}, {"timestamp": "2026-05-27T17:03:36.585Z", "date_only": false, "value": "2026-05-27T17:03:36.585000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.15.release_date"}, {"timestamp": "2026-06-01T15:25:35.578Z", "date_only": false, "value": "2026-06-01T15:25:35.578000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.16.release_date"}, {"timestamp": "2026-06-09T19:08:31.019Z", "date_only": false, "value": "2026-06-09T19:08:31.019000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.17.release_date"}, {"timestamp": "2026-06-09T19:21:42.603Z", "date_only": false, "value": "2026-06-09T19:21:42.603000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.18.release_date"}, {"timestamp": "2026-06-09T20:01:15.006Z", "date_only": false, "value": "2026-06-09T20:01:15.006955+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.17.discovery_date"}, {"timestamp": "2026-06-09T20:02:19.874Z", "date_only": false, "value": "2026-06-09T20:02:19.874232+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.18.discovery_date"}, {"timestamp": "2026-06-11T18:31:44.286Z", "date_only": false, "value": "2026-06-11T18:31:44.286000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.58.release_date"}, {"timestamp": "2026-06-11T18:32:14.471Z", "date_only": false, "value": "2026-06-11T18:32:14.471000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.57.release_date"}, {"timestamp": "2026-06-11T18:32:32.722Z", "date_only": false, "value": "2026-06-11T18:32:32.722000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.60.release_date"}, {"timestamp": "2026-06-11T19:00:56.050Z", "date_only": false, "value": "2026-06-11T19:00:56.050612+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.57.discovery_date"}, {"timestamp": "2026-06-11T19:01:57.042Z", "date_only": false, "value": "2026-06-11T19:01:57.042099+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.60.discovery_date"}, {"timestamp": "2026-06-11T19:02:45.999Z", "date_only": false, "value": "2026-06-11T19:02:45.999423+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.58.discovery_date"}, {"timestamp": "2026-06-14T17:21:43.853Z", "date_only": false, "value": "2026-06-14T17:21:43.853000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.62.release_date"}, {"timestamp": "2026-06-14T18:00:55.002Z", "date_only": false, "value": "2026-06-14T18:00:55.002567+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.62.discovery_date"}, {"timestamp": "2026-06-16T23:47:00Z", "date_only": false, "value": "2026-06-16T23:47:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.61.discovery_date"}, {"timestamp": "2026-06-17T23:28:34.852Z", "date_only": false, "value": "2026-06-17T23:28:34.852Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-55971", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-23T16:04:17.321Z", "date_only": false, "value": "2026-06-23T16:04:17.321000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.19.release_date"}, {"timestamp": "2026-06-23T17:05:33.822Z", "date_only": false, "value": "2026-06-23T17:05:33.822236+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.19.discovery_date"}, {"timestamp": "2026-06-24T16:21:49.589Z", "date_only": false, "value": "2026-06-24T16:21:49.589000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.67.discovery_date"}, {"timestamp": "2026-06-24T16:30:03.305Z", "date_only": false, "value": "2026-06-24T16:30:03.305000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.68.discovery_date"}, {"timestamp": "2026-06-24T16:40:58.048Z", "date_only": false, "value": "2026-06-24T16:40:58.048000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.69.discovery_date"}, {"timestamp": "2026-06-24T16:49:18.947Z", "date_only": false, "value": "2026-06-24T16:49:18.947000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.70.discovery_date"}, {"timestamp": "2026-06-24T17:16:25.796Z", "date_only": false, "value": "2026-06-24T17:16:25.796000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.71.discovery_date"}, {"timestamp": "2026-06-24T17:22:00.405Z", "date_only": false, "value": "2026-06-24T17:22:00.405000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.72.discovery_date"}, {"timestamp": "2026-06-24T17:29:08.344Z", "date_only": false, "value": "2026-06-24T17:29:08.344000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.73.discovery_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.20.discovery_date"}, {"timestamp": "2026-06-25T15:16:16.015Z", "date_only": false, "value": "2026-06-25T15:16:16.015000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.66.release_date"}, {"timestamp": "2026-06-25T15:22:37.949Z", "date_only": false, "value": "2026-06-25T15:22:37.949000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.65.release_date"}, {"timestamp": "2026-06-25T15:34:33.424Z", "date_only": false, "value": "2026-06-25T15:34:33.424000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.63.release_date"}, {"timestamp": "2026-06-25T16:01:18.343Z", "date_only": false, "value": "2026-06-25T16:01:18.343208+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.65.discovery_date"}, {"timestamp": "2026-06-25T16:01:37.648Z", "date_only": false, "value": "2026-06-25T16:01:37.648886+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.66.discovery_date"}, {"timestamp": "2026-06-25T16:02:21.870Z", "date_only": false, "value": "2026-06-25T16:02:21.870241+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.63.discovery_date"}, {"timestamp": "2026-06-26T00:00:00Z", "date_only": false, "value": "2026-06-26T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.21.discovery_date"}, {"timestamp": "2026-06-29T13:00:00Z", "date_only": false, "value": "2026-06-29T13:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.61.release_date"}, {"timestamp": "2026-07-07T00:00:00Z", "date_only": false, "value": "2026-07-07T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.24.release_date"}, {"timestamp": "2026-07-08T00:17:33.058Z", "date_only": false, "value": "2026-07-08T00:17:33.058000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.76.release_date"}, {"timestamp": "2026-07-08T01:01:33.808Z", "date_only": false, "value": "2026-07-08T01:01:33.808610+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.76.discovery_date"}, {"timestamp": "2026-07-09T17:10:57.317Z", "date_only": false, "value": "2026-07-09T17:10:57.317000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.22.release_date"}, {"timestamp": "2026-07-09T18:02:10.090Z", "date_only": false, "value": "2026-07-09T18:02:10.090070+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.22.discovery_date"}, {"timestamp": "2026-07-09T22:37:52.789Z", "date_only": false, "value": "2026-07-09T22:37:52.789000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.75.release_date"}, {"timestamp": "2026-07-09T22:39:01.803Z", "date_only": false, "value": "2026-07-09T22:39:01.803000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.74.release_date"}, {"timestamp": "2026-07-09T23:01:40.406Z", "date_only": false, "value": "2026-07-09T23:01:40.406872+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.74.discovery_date"}, {"timestamp": "2026-07-09T23:01:43.278Z", "date_only": false, "value": "2026-07-09T23:01:43.278752+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.75.discovery_date"}, {"timestamp": "2026-07-12T10:10:00Z", "date_only": false, "value": "2026-07-12T10:10:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.23.release_date"}, {"timestamp": "2026-07-13T00:00:00Z", "date_only": false, "value": "2026-07-13T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.23.discovery_date"}, {"timestamp": "2026-07-17T13:20:23.862Z", "date_only": false, "value": "2026-07-17T13:20:23.862000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.24.discovery_date"}, {"timestamp": "2026-07-22T16:33:05.724Z", "date_only": false, "value": "2026-07-22T16:33:05.724000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.77.release_date"}, {"timestamp": "2026-07-22T18:01:30.962Z", "date_only": false, "value": "2026-07-22T18:01:30.962327+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.77.discovery_date"}, {"timestamp": "2026-07-24T23:53:48.137Z", "date_only": false, "value": "2026-07-24T23:53:48.137749Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgkeq7s3y2x", "record": "CVE-2026-55971", "field": "creation_timestamp", "uuid": "7d25684a-e486-4f25-a673-849d2bf27338", "content": "CVE-2026-55971: Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgkeq7s3y2x"}, {"timestamp": "2026-07-27T00:00:00Z", "date_only": false, "value": "2026-07-27T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-55971", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-27T00:00:00Z", "date_only": false, "value": "2026-07-27T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-55971", "record": "FKIE_CVE-2026-55971", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-27T10:53:43.865Z", "date_only": false, "value": "2026-07-27T10:53:43.865000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:49837", "record": "RHSA-2026:49837", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-07-27T10:56:15.279Z", "date_only": false, "value": "2026-07-27T10:56:15.279000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:49837", "record": "RHSA-2026:49837", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-07-27T10:57:34.326Z", "date_only": false, "value": "2026-07-27T10:57:34.326000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:49837", "record": "RHSA-2026:49837", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-07-27T11:05:07.157Z", "date_only": false, "value": "2026-07-27T11:05:07.157000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:49837", "record": "RHSA-2026:49837", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-07-27T11:06:17.910Z", "date_only": false, "value": "2026-07-27T11:06:17.910000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:49837", "record": "RHSA-2026:49837", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-07-27T11:09:41.544Z", "date_only": false, "value": "2026-07-27T11:09:41.544000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:49837", "record": "RHSA-2026:49837", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-07-27T11:11:23.201Z", "date_only": false, "value": "2026-07-27T11:11:23.201Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-55971", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-07-27T11:11:23.201Z", "date_only": false, "value": "2026-07-27T11:11:23.201000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:49715", "record": "RHSA-2026:49715", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-07-27T11:11:23.201Z", "date_only": false, "value": "2026-07-27T11:11:23.201000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:49716", "record": "RHSA-2026:49716", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-07-27T11:11:23.201Z", "date_only": false, "value": "2026-07-27T11:11:23.201000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:49837", "record": "RHSA-2026:49837", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-07-27T11:11:23.201Z", "date_only": false, "value": "2026-07-27T11:11:23.201000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:51358", "record": "RHSA-2026:51358", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-07-27T11:11:23.201Z", "date_only": false, "value": "2026-07-27T11:11:23.201000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.64.release_date"}, {"timestamp": "2026-07-27T11:11:23.201Z", "date_only": false, "value": "2026-07-27T11:11:23.201Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2026-55971", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-27T11:12:40.875Z", "date_only": false, "value": "2026-07-27T11:12:40.875000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:49837", "record": "RHSA-2026:49837", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-07-27T11:18:49.830Z", "date_only": false, "value": "2026-07-27T11:18:49.830000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:49837", "record": "RHSA-2026:49837", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-07-27T12:01:15.066Z", "date_only": false, "value": "2026-07-27T12:01:15.066188+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:49837", "record": "RHSA-2026:49837", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-07-27T12:01:21.414Z", "date_only": false, "value": "2026-07-27T12:01:21.414479+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:49837", "record": "RHSA-2026:49837", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-07-27T12:01:25.459Z", "date_only": false, "value": "2026-07-27T12:01:25.459434+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:49837", "record": "RHSA-2026:49837", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-07-27T12:01:28.483Z", "date_only": false, "value": "2026-07-27T12:01:28.483023+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:49837", "record": "RHSA-2026:49837", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-07-27T12:01:31.554Z", "date_only": false, "value": "2026-07-27T12:01:31.554513+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:49837", "record": "RHSA-2026:49837", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-07-27T12:01:34.458Z", "date_only": false, "value": "2026-07-27T12:01:34.458030+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:49837", "record": "RHSA-2026:49837", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-07-27T12:01:38.876Z", "date_only": false, "value": "2026-07-27T12:01:38.876845+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:49837", "record": "RHSA-2026:49837", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-07-27T12:01:48.872Z", "date_only": false, "value": "2026-07-27T12:01:48.872068+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:49837", "record": "RHSA-2026:49837", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-07-27T12:01:58.342Z", "date_only": false, "value": "2026-07-27T12:01:58.342437+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:49715", "record": "RHSA-2026:49715", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-07-27T12:01:58.342Z", "date_only": false, "value": "2026-07-27T12:01:58.342437+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:49716", "record": "RHSA-2026:49716", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-07-27T12:01:58.342Z", "date_only": false, "value": "2026-07-27T12:01:58.342437+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:49837", "record": "RHSA-2026:49837", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-07-27T12:01:58.342Z", "date_only": false, "value": "2026-07-27T12:01:58.342437+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:51358", "record": "RHSA-2026:51358", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-07-27T12:01:58.342Z", "date_only": false, "value": "2026-07-27T12:01:58.342437+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.64.discovery_date"}, {"timestamp": "2026-07-27T12:16:00Z", "date_only": false, "value": "2026-07-27T12:16:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-55971", "record": "UBUNTU-CVE-2026-55971", "field": "published"}, {"timestamp": "2026-07-27T12:16:46Z", "date_only": false, "value": "2026-07-27T12:16:46Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GWJ4-Q93M-WWQC", "record": "GHSA-GWJ4-Q93M-WWQC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-07-27T12:16:46.110Z", "date_only": false, "value": "2026-07-27T12:16:46.110", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-55971", "record": "FKIE_CVE-2026-55971", "field": "published"}, {"timestamp": "2026-07-27T12:31:17Z", "date_only": false, "value": "2026-07-27T12:31:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GWJ4-Q93M-WWQC", "record": "GHSA-GWJ4-Q93M-WWQC", "field": "published"}, {"timestamp": "2026-07-27T13:07:26.706Z", "date_only": false, "value": "2026-07-27T13:07:26.706Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2026-55971", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-27T14:02:05.877Z", "date_only": false, "value": "2026-07-27T14:02:05.877218Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrn2pgxr2g2v", "record": "CVE-2026-55971", "field": "creation_timestamp", "uuid": "5b891585-c2be-40d5-bb4c-c8225ed74936", "content": "CVE-2026-55971 - apache thrift\nApache Thrift's C++ version before 0.24.0 is affected. If exploited, this vulnerability can cause a server to crash. To fix this, update to version 0.24.0 or later.\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachethrift #apachefoundation #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mrn2pgxr2g2v"}, {"timestamp": "2026-07-27T21:31:21Z", "date_only": false, "value": "2026-07-27T21:31:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GWJ4-Q93M-WWQC", "record": "GHSA-GWJ4-Q93M-WWQC", "field": "modified"}, {"timestamp": "2026-07-28T03:55:51.567Z", "date_only": false, "value": "2026-07-28T03:55:51.567Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-55971", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-28T03:55:51.567Z", "date_only": false, "value": "2026-07-28T03:55:51.567Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-55971", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-28T09:08:22.176Z", "date_only": false, "value": "2026-07-28T09:08:22.176Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-THRIFT-2026-55971", "record": "BIT-THRIFT-2026-55971", "field": "published"}, {"timestamp": "2026-07-28T14:07:07.110Z", "date_only": false, "value": "2026-07-28T14:07:07.110088Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrplhdexpn22", "record": "CVE-2026-55971", "field": "creation_timestamp", "uuid": "8f82be4e-01cc-4f61-9232-1827c067670d", "content": "\ud83d\udccc CVE-2026-55971 - Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings.\n\nThis issue affects Apache Thrift: before 0.24.0.\n\nUsers are recommended to up... https://www.cyberhub.blog/cves/CVE-2026-55971", "url": "https://bsky.app/profile/cyberhub.blog/post/3mrplhdexpn22"}, {"timestamp": "2026-08-01T00:00:00Z", "date_only": false, "value": "2026-08-01T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11432-1", "record": "OPENSUSE-SU-2026:11432-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-01T00:00:00Z", "date_only": false, "value": "2026-08-01T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11432-1", "record": "OPENSUSE-SU-2026:11432-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-08-01T00:00:00Z", "date_only": false, "value": "2026-08-01T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11432-1", "record": "OPENSUSE-SU-2026:11432-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-01T00:00:00Z", "date_only": false, "value": "2026-08-01T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11432-1", "record": "OPENSUSE-SU-2026:11432-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-03T17:01:52Z", "date_only": false, "value": "2026-08-03T17:01:52+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:49716", "record": "RHSA-2026:49716", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-03T17:01:52Z", "date_only": false, "value": "2026-08-03T17:01:52+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:49716", "record": "RHSA-2026:49716", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-08-03T17:01:52Z", "date_only": false, "value": "2026-08-03T17:01:52+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:49716", "record": "RHSA-2026:49716", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-03T17:02:07Z", "date_only": false, "value": "2026-08-03T17:02:07+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:49715", "record": "RHSA-2026:49715", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-03T17:02:07Z", "date_only": false, "value": "2026-08-03T17:02:07+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:49715", "record": "RHSA-2026:49715", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-08-03T17:02:07Z", "date_only": false, "value": "2026-08-03T17:02:07+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:49715", "record": "RHSA-2026:49715", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-03T22:00:00Z", "date_only": false, "value": "2026-08-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2629", "record": "WID-SEC-W-2026-2629", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-03T22:00:00Z", "date_only": false, "value": "2026-08-03T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2629", "record": "WID-SEC-W-2026-2629", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-03T22:00:00Z", "date_only": false, "value": "2026-08-03T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2629", "record": "WID-SEC-W-2026-2629", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-08-03T23:43:03Z", "date_only": false, "value": "2026-08-03T23:43:03+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:49837", "record": "RHSA-2026:49837", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-03T23:43:03Z", "date_only": false, "value": "2026-08-03T23:43:03+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:49837", "record": "RHSA-2026:49837", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-08-03T23:43:03Z", "date_only": false, "value": "2026-08-03T23:43:03+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:49837", "record": "RHSA-2026:49837", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-04T22:00:00Z", "date_only": false, "value": "2026-08-04T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2629", "record": "WID-SEC-W-2026-2629", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-08-06T20:38:23Z", "date_only": false, "value": "2026-08-06T20:38:23+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:51358", "record": "RHSA-2026:51358", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-06T20:38:23Z", "date_only": false, "value": "2026-08-06T20:38:23+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:51358", "record": "RHSA-2026:51358", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-08-06T20:38:23Z", "date_only": false, "value": "2026-08-06T20:38:23+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:51358", "record": "RHSA-2026:51358", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-06T22:00:00Z", "date_only": false, "value": "2026-08-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2629", "record": "WID-SEC-W-2026-2629", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-08-10T22:00:00Z", "date_only": false, "value": "2026-08-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2629", "record": "WID-SEC-W-2026-2629", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-08-10T22:00:00Z", "date_only": false, "value": "2026-08-10T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2629", "record": "WID-SEC-W-2026-2629", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-08-11T08:57:06.392Z", "date_only": false, "value": "2026-08-11T08:57:06.392+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2629", "record": "WID-SEC-W-2026-2629", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-11T14:49:16.817Z", "date_only": false, "value": "2026-08-11T14:49:16.817000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.78.release_date"}, {"timestamp": "2026-08-11T15:01:14.226Z", "date_only": false, "value": "2026-08-11T15:01:14.226581+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.78.discovery_date"}, {"timestamp": "2026-08-11T15:31:35.331Z", "date_only": false, "value": "2026-08-11T15:31:35.331000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.79.release_date"}, {"timestamp": "2026-08-11T15:37:59.894Z", "date_only": false, "value": "2026-08-11T15:37:59.894000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.80.release_date"}, {"timestamp": "2026-08-11T15:39:24.579Z", "date_only": false, "value": "2026-08-11T15:39:24.579000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.81.release_date"}, {"timestamp": "2026-08-11T15:41:02.894Z", "date_only": false, "value": "2026-08-11T15:41:02.894650+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.80.discovery_date"}, {"timestamp": "2026-08-11T15:41:08.048Z", "date_only": false, "value": "2026-08-11T15:41:08.048000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.82.release_date"}, {"timestamp": "2026-08-11T15:41:15.596Z", "date_only": false, "value": "2026-08-11T15:41:15.596551+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.79.discovery_date"}, {"timestamp": "2026-08-11T16:10:59.827Z", "date_only": false, "value": "2026-08-11T16:10:59.827742+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.82.discovery_date"}, {"timestamp": "2026-08-11T16:11:25.535Z", "date_only": false, "value": "2026-08-11T16:11:25.535913+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.81.discovery_date"}, {"timestamp": "2026-08-27T11:48:03.039Z", "date_only": false, "value": "2026-08-27T11:48:03.039287Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/prajnak/06b8b2c74ce416478b826c460d0061f8", "record": "CVE-2026-55971", "field": "creation_timestamp", "uuid": "89cc4ef0-fab5-4284-a9ff-cd7dcf0f1cd9", "content": "# Apache Thrift 2026 CVEs are invisible to purl-matching SCA\n\n**TL;DR** \u2014 The August 2026 Apache Thrift advisories (fixed in `0.24.0`) carry\n**CPE identifiers only**. No `pkg:pypi` / `pkg:maven` purl is ever produced, so any\nSCA that matches code libraries by ecosystem+purl finds nothing to attach them to.\nAn image with `thrift==0.22.0` installed from PyPI scans **clean**.\n\nThis is reproducible in two `curl` calls against public APIs \u2014 no scanner licence,\nno private data.\n\n---\n\n## Reproduce in 30 seconds (no Docker needed)\n\n### 1. Ask OSV whether PyPI `thrift` 0.22.0 has known vulnerabilities\n\n```bash\ncurl -s -X POST https://api.osv.dev/v1/query \\\n  -d '{\"package\":{\"name\":\"thrift\",\"ecosystem\":\"PyPI\"},\"version\":\"0.22.0\"}'\n```\n\n```json\n{}\n```\n\nEmpty. Zero vulnerabilities.\n\n### 2. Now confirm the advisory exists \u2014 and explicitly names Python\n\n```bash\ncurl -s https://api.osv.dev/v1/vulns/CVE-2026-41608 | jq '{id, summary}'\n```\n\n```json\n{\n  \"id\": \"CVE-2026-41608\",\n  \"summary\": \"Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransport\"\n}\n```\n\nThe advisory exists. Its own summary says **Python**. `0.22.0` is in range\n(fixed in `0.24.0`). Yet step 1 returns nothing.\n\n---\n\n## Root cause\n\n```bash\ncurl -s https://api.osv.dev/v1/vulns/CVE-2026-41608 | jq '.affected[0]'\n```\n\n```json\n{\n  \"ranges\": [\n    {\n      \"type\": \"GIT\",\n      \"repo\": \"https://github.com/apache/thrift\",\n      \"events\": [\n        { \"introduced\": \"0\" },\n        { \"fixed\": \"6d2ec95f450b4ce404afb8929ff479e68770141a\" }\n      ],\n      \"database_specific\": {\n        \"cpe\": \"cpe:2.3:a:apache:thrift:*:*:*:*:*:*:*:*\",\n        \"extracted_events\": [\n          { \"introduced\": \"0\" },\n          { \"fixed\": \"0.24.0\" }\n        ],\n        \"source\": \"CPE_RANGE\"\n      }\n    }\n  ],\n  \"versions\": [\"last-before-0-10\"]\n}\n```\n\nThree things to notice:\n\n1. **There is no `package` key.** No ecosystem, no name, no purl. A purl-matching\n   engine has nothing to key on.\n2. `ranges[0].type` is **`GIT`**, not `ECOSYSTEM` \u2014 the range is a commit SHA,\n   auto-derived from a CPE (`\"source\": \"CPE_RANGE\"`).\n3. `versions` is `[\"last-before-0-10\"]` \u2014 a placeholder artifact of that\n   conversion, not a usable version list.\n\nThe upstream advisory was filed against the Apache Thrift *product* via CPE.\nNothing downstream ever binds it to `pkg:pypi/thrift`, `pkg:maven/org.apache.thrift/libthrift`,\n`pkg:npm/thrift`, or any other ecosystem package.\n\n---\n\n## Reproduce against a container image\n\n```dockerfile\n# Dockerfile\nFROM python:3.12-slim\nRUN pip install --no-cache-dir thrift==0.22.0\n```\n\n```bash\ndocker build -t thrift-cve-repro:0.22.0 .\n```\n\nConfirm the package and its metadata are present and discoverable:\n\n```bash\ndocker run --rm thrift-cve-repro:0.22.0 \\\n  sh -c 'pip show thrift | head -2; ls /usr/local/lib/python3.12/site-packages | grep -i thrift'\n```\n\n```\nName: thrift\nVersion: 0.22.0\nthrift\nthrift-0.22.0.dist-info\n```\n\nNow scan that image with any purl-matching SCA.\n\n**Expected:** at least CVE-2026-41608, CVE-2026-48586, CVE-2026-43871 reported,\nfixed in `0.24.0`.\n\n**Actual:** zero findings for `thrift`. The SBOM correctly lists\n`thrift 0.22.0 (PyPI)` \u2014 discovery works fine. Only *matching* fails.\n\n---\n\n## Which advisories actually apply to a Python deployment\n\nApache Thrift published 18 advisories fixed in `0.24.0`. **Only three name the\nPython bindings.** These are the ones a PyPI `thrift` install is exposed to:\n\n| CVE | Bindings named in the advisory | CVSS |\n|---|---|---|\n| CVE-2026-41608 | **Python** only | 7.5 |\n| CVE-2026-48586 | C++, Java, **Python**, Go, D, C/GLib | 7.5 |\n| CVE-2026-43871 | **Python**, Go, PHP, Java | 7.5 |\n\nAll three: `AV:N/AC:L/PR:N/UI:N/C:N/I:N/A:H` \u2014 remote unauthenticated\ndenial of service against anything deserializing untrusted Thrift payloads.\n\nThe other 15 do **not** apply to a Python deployment. They are C++, c_glib,\nSwift, Rust, Node.js, Go and Java binding bugs \u2014 `TSSLSocket::matchName`,\n`web_server.js`, `TFramedTransport` uint32 overflow, and similar. None of that\ncode ships in the PyPI package.\n\nVerify any of them yourself:\n\n```bash\nfor c in CVE-2026-55971 CVE-2026-58023 CVE-2026-41604 CVE-2026-41602; do\n  curl -s \"https://api.osv.dev/v1/vulns/$c\" | jq -r '\"\\(.id)  \\(.summary)\"'\ndone\n```\n\n```\nCVE-2026-55971  Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()\nCVE-2026-58023  Apache Thrift: c_glib heap out-of-bounds read in transport\nCVE-2026-41604  Apache Thrift: Swift Range crash in skip()\nCVE-2026-41602  Apache Thrift: Go TFramedTransport uint32 overflow\n```\n\n---\n\n## What a fix should look like\n\nAdd ecosystem/purl mappings **per binding**, driven by the bindings each advisory\nnames in its own text:\n\n```\nCVE-2026-41608  ->  pkg:pypi/thrift                         (< 0.24.0)\nCVE-2026-48586  ->  pkg:pypi/thrift, pkg:maven/org.apache.thrift/libthrift, ...\nCVE-2026-43871  ->  pkg:pypi/thrift, pkg:maven/..., pkg:composer/...\n```\n\n## What a fix should **not** look like\n\nDo not blanket-CPE-match ecosystem packages against `cpe:2.3:a:apache:thrift`.\n\nA scanner that does this reports **all 18** against `thrift 0.22.0`, including\n~14 rated Critical \u2014 because it inherits per-binding CVSS scores from bindings\nthat aren't installed. That is roughly **5\u00d7 over-reported** for a Python\ndeployment, and triaging it back down to the real three costs more time than the\noriginal finding saved.\n\nThe gap here is precision *and* recall: three real findings are missed, and the\nnaive fix would introduce fifteen false ones.\n\n---\n\n## Wider question\n\nApache Thrift is unlikely to be unique. The pattern is: **one upstream project,\nmany language bindings, advisories filed at product level with CPE only**.\nOther multi-binding projects (protobuf, gRPC, Avro, Arrow, ICU, libxml2\nwrappers) plausibly share it.\n\nTwo things that would help anyone consuming this data:\n\n1. A way to report on SBOM components whose only matching advisories are\n   CPE-only \u2014 i.e. *where am I blind right now?*\n2. Systematic per-binding purl mapping where an advisory's text names the\n   affected bindings, rather than case-by-case backfill.\n\n---\n\n*Verified 2026-08-27 against `api.osv.dev`. Everything above uses public APIs and\npublic package data; no scanner output or private environment data is included.*\n", "url": "https://gist.github.com/prajnak/06b8b2c74ce416478b826c460d0061f8"}, {"timestamp": "2026-09-08T14:32:32Z", "date_only": false, "value": "2026-09-08T14:32:32+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:49837", "record": "RHSA-2026:49837", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T20:22:02Z", "date_only": false, "value": "2026-09-16T20:22:02Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11432-1", "record": "OPENSUSE-SU-2026:11432-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T21:24:44Z", "date_only": false, "value": "2026-09-16T21:24:44Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11432-1", "record": "OPENSUSE-SU-2026:11432-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-17T17:17:49Z", "date_only": false, "value": "2026-09-17T17:17:49Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11432-1", "record": "OPENSUSE-SU-2026:11432-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-17T17:17:49Z", "date_only": false, "value": "2026-09-17T17:17:49Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11432-1", "record": "OPENSUSE-SU-2026:11432-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-01T20:54:01Z", "date_only": false, "value": "2026-10-01T20:54:01+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-01T20:54:01Z", "date_only": false, "value": "2026-10-01T20:54:01+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-01T20:54:01Z", "date_only": false, "value": "2026-10-01T20:54:01+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-01T20:54:04Z", "date_only": false, "value": "2026-10-01T20:54:04+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-02T02:22:09Z", "date_only": false, "value": "2026-10-02T02:22:09+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:49715", "record": "RHSA-2026:49715", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-02T02:22:09Z", "date_only": false, "value": "2026-10-02T02:22:09+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:49715", "record": "RHSA-2026:49715", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-02T02:22:09Z", "date_only": false, "value": "2026-10-02T02:22:09+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:49715", "record": "RHSA-2026:49715", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-02T02:22:12Z", "date_only": false, "value": "2026-10-02T02:22:12+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:49716", "record": "RHSA-2026:49716", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-02T02:22:12Z", "date_only": false, "value": "2026-10-02T02:22:12+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:49716", "record": "RHSA-2026:49716", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-02T02:22:12Z", "date_only": false, "value": "2026-10-02T02:22:12+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:49716", "record": "RHSA-2026:49716", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-02T02:22:17Z", "date_only": false, "value": "2026-10-02T02:22:17+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:51358", "record": "RHSA-2026:51358", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-02T02:22:17Z", "date_only": false, "value": "2026-10-02T02:22:17+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:51358", "record": "RHSA-2026:51358", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-02T02:22:17Z", "date_only": false, "value": "2026-10-02T02:22:17+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:51358", "record": "RHSA-2026:51358", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-16T04:01:58Z", "date_only": false, "value": "2026-10-16T04:01:58+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:49837", "record": "RHSA-2026:49837", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-16T04:01:58Z", "date_only": false, "value": "2026-10-16T04:01:58+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:49837", "record": "RHSA-2026:49837", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-16T04:01:58Z", "date_only": false, "value": "2026-10-16T04:01:58+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:49837", "record": "RHSA-2026:49837", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-16T09:07:50.945Z", "date_only": false, "value": "2026-10-16T09:07:50.945Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-THRIFT-2026-55971", "record": "BIT-THRIFT-2026-55971", "field": "modified"}, {"timestamp": "2026-10-17T09:45:56Z", "date_only": false, "value": "2026-10-17T09:45:56Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-55971", "record": "UBUNTU-CVE-2026-55971", "field": "modified"}, {"timestamp": "2026-10-24T13:10:00.147Z", "date_only": false, "value": "2026-10-24T13:10:00.147", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-55971", "record": "FKIE_CVE-2026-55971", "field": "lastModified"}, {"timestamp": "2026-10-27T04:19:14Z", "date_only": false, "value": "2026-10-27T04:19:14+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-27T04:19:14Z", "date_only": false, "value": "2026-10-27T04:19:14+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-27T04:19:14Z", "date_only": false, "value": "2026-10-27T04:19:14+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:74674", "record": "RHSA-2026:74674", "field": "document.tracking.current_release_date"}]}