{"metadata": {"vulnerability": "CVE-2026-63199", "count": 73, "kinds": {"milestone": 6, "sighting": 3, "kev": 0, "other": 64}}, "data": [{"timestamp": "2026-06-02T22:01:37.219Z", "date_only": false, "value": "2026-06-02T22:01:37.219000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-06-02T23:01:00.320Z", "date_only": false, "value": "2026-06-02T23:01:00.320527+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-06-04T14:38:23.707Z", "date_only": false, "value": "2026-06-04T14:38:23.707000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-06-04T16:01:10.300Z", "date_only": false, "value": "2026-06-04T16:01:10.300537+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-07-08T15:58:12.114Z", "date_only": false, "value": "2026-07-08T15:58:12.114000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-07-08T17:01:32.856Z", "date_only": false, "value": "2026-07-08T17:01:32.856832+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-07-10T00:00:00Z", "date_only": false, "value": "2026-07-10T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-07-10T17:02:03.318Z", "date_only": false, "value": "2026-07-10T17:02:03.318159+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-07-15T22:13:00.722Z", "date_only": false, "value": "2026-07-15T22:13:00.722Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-63199", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-27T17:23:13.326Z", "date_only": false, "value": "2026-07-27T17:23:13.326000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-07-27T18:01:09.671Z", "date_only": false, "value": "2026-07-27T18:01:09.671498+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-07-31T00:00:00Z", "date_only": false, "value": "2026-07-31T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11413-1", "record": "OPENSUSE-SU-2026:11413-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-31T00:00:00Z", "date_only": false, "value": "2026-07-31T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11413-1", "record": "OPENSUSE-SU-2026:11413-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-07-31T00:00:00Z", "date_only": false, "value": "2026-07-31T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11413-1", "record": "OPENSUSE-SU-2026:11413-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-31T00:00:00Z", "date_only": false, "value": "2026-07-31T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11413-1", "record": "OPENSUSE-SU-2026:11413-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-07T16:37:40.058Z", "date_only": false, "value": "2026-08-07T16:37:40.058000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-08-07T16:51:14.251Z", "date_only": false, "value": "2026-08-07T16:51:14.251077+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-08-11T16:46:23.024Z", "date_only": false, "value": "2026-08-11T16:46:23.024000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2026-08-11T17:11:45.607Z", "date_only": false, "value": "2026-08-11T17:11:45.607696+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-08-13T21:58:53.475Z", "date_only": false, "value": "2026-08-13T21:58:53.475000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-08-13T21:58:53.605Z", "date_only": false, "value": "2026-08-13T21:58:53.605000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-08-13T22:15:05.065Z", "date_only": false, "value": "2026-08-13T22:15:05.065919+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-08-13T22:16:11.877Z", "date_only": false, "value": "2026-08-13T22:16:11.877054+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-08-24T09:30:04.212Z", "date_only": false, "value": "2026-08-24T09:30:04.212000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2026-08-24T09:40:19.801Z", "date_only": false, "value": "2026-08-24T09:40:19.801000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2026-08-24T09:51:02.191Z", "date_only": false, "value": "2026-08-24T09:51:02.191062+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2026-08-24T09:51:05.559Z", "date_only": false, "value": "2026-08-24T09:51:05.559475+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-08-24T09:58:07.698Z", "date_only": false, "value": "2026-08-24T09:58:07.698000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.13.release_date"}, {"timestamp": "2026-08-24T10:07:56.440Z", "date_only": false, "value": "2026-08-24T10:07:56.440000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.14.release_date"}, {"timestamp": "2026-08-24T10:11:05.356Z", "date_only": false, "value": "2026-08-24T10:11:05.356309+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.13.discovery_date"}, {"timestamp": "2026-08-24T10:31:12.887Z", "date_only": false, "value": "2026-08-24T10:31:12.887477+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.14.discovery_date"}, {"timestamp": "2026-09-02T20:09:51.415Z", "date_only": false, "value": "2026-09-02T20:09:51.415000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.15.release_date"}, {"timestamp": "2026-09-02T20:21:15.599Z", "date_only": false, "value": "2026-09-02T20:21:15.599288+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.15.discovery_date"}, {"timestamp": "2026-09-02T20:25:35.399Z", "date_only": false, "value": "2026-09-02T20:25:35.399000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.16.release_date"}, {"timestamp": "2026-09-02T20:31:21.036Z", "date_only": false, "value": "2026-09-02T20:31:21.036047+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.16.discovery_date"}, {"timestamp": "2026-09-04T16:47:55.724Z", "date_only": false, "value": "2026-09-04T16:47:55.724000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.18.release_date"}, {"timestamp": "2026-09-04T16:52:40.440Z", "date_only": false, "value": "2026-09-04T16:52:40.440125+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.18.discovery_date"}, {"timestamp": "2026-09-04T17:10:05.081Z", "date_only": false, "value": "2026-09-04T17:10:05.081000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-09-04T17:21:01.599Z", "date_only": false, "value": "2026-09-04T17:21:01.599799+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-09-14T16:11:41.401Z", "date_only": false, "value": "2026-09-14T16:11:41.401000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.17.release_date"}, {"timestamp": "2026-09-14T16:22:17.356Z", "date_only": false, "value": "2026-09-14T16:22:17.356407+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.17.discovery_date"}, {"timestamp": "2026-09-15T20:56:45.780Z", "date_only": false, "value": "2026-09-15T20:56:45.780000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.19.release_date"}, {"timestamp": "2026-09-15T21:26:17.292Z", "date_only": false, "value": "2026-09-15T21:26:17.292353+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.19.discovery_date"}, {"timestamp": "2026-09-16T20:21:44Z", "date_only": false, "value": "2026-09-16T20:21:44Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11413-1", "record": "OPENSUSE-SU-2026:11413-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T21:24:24Z", "date_only": false, "value": "2026-09-16T21:24:24Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11413-1", "record": "OPENSUSE-SU-2026:11413-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-17T17:17:28Z", "date_only": false, "value": "2026-09-17T17:17:28Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11413-1", "record": "OPENSUSE-SU-2026:11413-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-18T17:36:05.256Z", "date_only": false, "value": "2026-09-18T17:36:05.256Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-63199", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-18T17:36:05.256Z", "date_only": false, "value": "2026-09-18T17:36:05.256000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-09-18T17:36:05.256Z", "date_only": false, "value": "2026-09-18T17:36:05.256Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-63199", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-18T17:39:48Z", "date_only": false, "value": "2026-09-18T17:39:48Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4227-9989-JRHX", "record": "GHSA-4227-9989-JRHX", "field": "published"}, {"timestamp": "2026-09-18T17:39:48Z", "date_only": false, "value": "2026-09-18T17:39:48Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4227-9989-JRHX", "record": "GHSA-4227-9989-JRHX", "field": "modified"}, {"timestamp": "2026-09-18T18:17:09.980Z", "date_only": false, "value": "2026-09-18T18:17:09.980", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63199", "record": "FKIE_CVE-2026-63199", "field": "published"}, {"timestamp": "2026-09-19T05:32:22.156Z", "date_only": false, "value": "2026-09-19T05:32:22.156134Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/de46e4b55e23d058335a512366f2ab2a", "record": "CVE-2026-63199", "field": "creation_timestamp", "uuid": "27a7238d-e905-4251-8545-fc8c60184431", "content": "# CVE-2026-63199: CVE-2026-63199: Cross-Scope Secret Disclosure via Missing Authorization in Perses Datasource Proxy\n\n> **CVSS Score:** 8.3\n> **Published:** 2026-09-18\n> **Full Report:** https://cvereports.com/reports/CVE-2026-63199\n\n## Summary\nCVE-2026-63199 is a critical missing authorization vulnerability (CWE-862) in Perses versions 0.43.0 to 0.54.0-rc.0. It allows low-privileged attackers to retrieve and exfiltrate highly sensitive credentials (secrets) from different scopes by configuring a malicious datasource pointing to an attacker-controlled endpoint.\n\n## TL;DR\nA missing authorization check in Perses' datasource proxy allows low-privileged users to exfiltrate database and system credentials to external servers.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-862 (Missing Authorization)\n- **Attack Vector**: Network\n- **CVSS Score**: 8.3 (High)\n- **EPSS Score**: 0.00 (New/Unlisted)\n- **Primary Impact**: Cross-Scope Secret Disclosure\n- **Exploit Status**: Proof-of-Concept\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Perses\n- **Perses**: >= 0.43.0, < 0.54.0-rc.0 (Fixed in: `0.54.0-rc.0`)\n\n## Mitigation\n\n- Upgrade Perses to version 0.54.0-rc.0 or higher.\n- Restrict creation and modification of Datasources/GlobalDatasources to trusted administrators.\n- Implement egress network filtering on the Perses server to block external connections to unapproved targets.\n- Rotate all credentials, API keys, and connection passwords saved inside the Perses Secret store.\n\n**Remediation Steps:**\n1. Identify current Perses version using the administrative dashboard or server logs.\n2. Schedule maintenance window and download Perses v0.54.0-rc.0 or a later stable release.\n3. Audit existing saved Datasources in the Perses database to detect any unauthorized secret mappings.\n4. Deploy the updated Perses binary/container and verify API logs for correct permission enforcement.\n5. Establish egress firewall rules restricting outbound connections from the Perses gateway host.\n\n## References\n\n- [NVD - CVE-2026-63199](https://nvd.nist.gov/vuln/detail/CVE-2026-63199)\n- [GitHub Security Advisory GHSA-4227-9989-jrhx](https://github.com/perses/perses/security/advisories/GHSA-4227-9989-jrhx)\n- [Perses Fix Commit](https://github.com/perses/perses/commit/2368c9ef4eb0a70fbca5df69aa20e595821ab625)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-63199) - Automated Vulnerability Intelligence*", "url": "https://gist.github.com/alon710/de46e4b55e23d058335a512366f2ab2a"}, {"timestamp": "2026-09-19T08:19:45Z", "date_only": false, "value": "2026-09-19T08:19:45Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11413-1", "record": "OPENSUSE-SU-2026:11413-1", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-09-20T21:49:08Z", "date_only": false, "value": "2026-09-20T21:49:08Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11413-1", "record": "OPENSUSE-SU-2026:11413-1", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2026-09-20T21:49:08Z", "date_only": false, "value": "2026-09-20T21:49:08Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11413-1", "record": "OPENSUSE-SU-2026:11413-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-22T21:02:21.863Z", "date_only": false, "value": "2026-09-22T21:02:21.863881+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-09-24T21:01:42.526Z", "date_only": false, "value": "2026-09-24T21:01:42.526103Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-63199", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-24T21:01:42.526Z", "date_only": false, "value": "2026-09-24T21:01:42.526103Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63199", "record": "FKIE_CVE-2026-63199", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-24T21:05:26.515Z", "date_only": false, "value": "2026-09-24T21:05:26.515Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-63199", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-24T21:05:26.515Z", "date_only": false, "value": "2026-09-24T21:05:26.515Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-63199", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-26T13:23:49.448Z", "date_only": false, "value": "2026-09-26T13:23:49.448000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.20.release_date"}, {"timestamp": "2026-09-26T13:31:52.612Z", "date_only": false, "value": "2026-09-26T13:31:52.612322+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.20.discovery_date"}, {"timestamp": "2026-09-26T17:31:02.633Z", "date_only": false, "value": "2026-09-26T17:31:02.633221Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwgst7i4gl2u", "record": "CVE-2026-63199", "field": "creation_timestamp", "uuid": "c8f959e4-11b5-4fc9-b4e6-2e335561a271", "content": "CVE-2026-63199: Perses datasource paths skip Secret read checks, letting low-priv users attach project/global Secrets. CVSS N/A, unpatched. Patch or restrict create rights now. https://www.valtersit.com/cve/CVE-2026-63199/ #CVE #infosec #Perses", "url": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwgst7i4gl2u"}, {"timestamp": "2026-09-26T17:37:18.090Z", "date_only": false, "value": "2026-09-26T17:37:18.090470Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/hugovalters/statuses/117338528972006852", "record": "CVE-2026-63199", "field": "creation_timestamp", "uuid": "89e64eac-5def-48ce-9285-d3054c11adf8", "content": "CVE-2026-63199: Perses datasource paths skip Secret read checks, letting low-priv users attach project/global Secrets. CVSS N/A, unpatched. Patch or restrict create rights now. https://www.valtersit.com/cve/CVE-2026-63199/ #CVE #infosec #Perses", "url": "https://mastodon.social/users/hugovalters/statuses/117338528972006852"}, {"timestamp": "2026-09-30T17:32:07.107Z", "date_only": false, "value": "2026-09-30T17:32:07.107", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63199", "record": "FKIE_CVE-2026-63199", "field": "lastModified"}, {"timestamp": "2026-10-01T18:20:29Z", "date_only": false, "value": "2026-10-01T18:20:29+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-01T18:20:29Z", "date_only": false, "value": "2026-10-01T18:20:29+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-01T18:20:29Z", "date_only": false, "value": "2026-10-01T18:20:29+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-01T18:20:31Z", "date_only": false, "value": "2026-10-01T18:20:31+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-20T20:11:48Z", "date_only": false, "value": "2026-10-20T20:11:48+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-20T20:11:48Z", "date_only": false, "value": "2026-10-20T20:11:48+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-20T20:11:48Z", "date_only": false, "value": "2026-10-20T20:11:48+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:74609", "record": "RHSA-2026:74609", "field": "document.tracking.current_release_date"}]}