{"metadata": {"vulnerability": "CVE-2026-67331", "count": 18, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-05-31T00:00:00Z", "date_only": false, "value": "2026-05-31T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-67331", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-29T13:07:47.015Z", "date_only": false, "value": "2026-07-29T13:07:47.015Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-67331", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-01T12:22:17.565Z", "date_only": false, "value": "2026-08-01T12:22:17.565Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-67331", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-01T13:17:03Z", "date_only": false, "value": "2026-08-01T13:17:03Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GJ37-5J8H-J367", "record": "GHSA-GJ37-5J8H-J367", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-08-01T13:17:03.833Z", "date_only": false, "value": "2026-08-01T13:17:03.833", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-67331", "record": "FKIE_CVE-2026-67331", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-01T15:30:29Z", "date_only": false, "value": "2026-08-01T15:30:29Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GJ37-5J8H-J367", "record": "GHSA-GJ37-5J8H-J367", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-01T15:30:29Z", "date_only": false, "value": "2026-08-01T15:30:29Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GJ37-5J8H-J367", "record": "GHSA-GJ37-5J8H-J367", "field": "modified"}, {"timestamp": "2026-08-01T20:00:50.265Z", "date_only": false, "value": "2026-08-01T20:00:50.265172Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2b3iwxgv2a", "record": "CVE-2026-67331", "field": "creation_timestamp", "uuid": "589aa36c-e344-443d-832a-3f1a9a6dfc91", "content": "\ud83d\udfe0 CVE-2026-67331 - High (8.3)\n\nbetter-auth SCIM versions from 1.5.0 before 1.7.0-beta.4 fail to bind non-organization SCIM provi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67331/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2b3iwxgv2a"}, {"timestamp": "2026-08-01T22:07:00.083Z", "date_only": false, "value": "2026-08-01T22:07:00.083169Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2i54ja5f2z", "record": "CVE-2026-67331", "field": "creation_timestamp", "uuid": "0eb7b964-87f5-42ac-9e3a-07595d221b3e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67331 \u0432 better-auth SCIM: \u043a\u0430\u043a \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e bypass \u0438 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435\n\n\n\nhttps://kripta.biz/posts/227FC676-4398-4AB5-9910-E792E6B3AEDF", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2i54ja5f2z"}, {"timestamp": "2026-08-01T23:08:19.199Z", "date_only": false, "value": "2026-08-01T23:08:19.199100Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2lkr5ys22p", "record": "CVE-2026-67331", "field": "creation_timestamp", "uuid": "ed84634a-2182-47ba-a1d2-866e30991c68", "content": "\u05d7\u05e9\u05d9\u05e4\u05ea \u05e4\u05e8\u05e6\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-better-auth SCIM: \u05de\u05d4 \u05e2\u05d5\u05de\u05d3 \u05de\u05d0\u05d7\u05d5\u05e8\u05d9 CVE-2026-67331 \u05d5\u05d0\u05d9\u05da \u05dc\u05d4\u05d2\u05df \u05e2\u05dc \u05d4\u05de\u05e2\u05e8\u05db\u05ea \u05e9\u05dc\u05da\n\n\n\nhttps://khesef.xyz/posts/12CF6E8A-668D-4F6C-8C0E-1DFC6C2511CE", "url": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2lkr5ys22p"}, {"timestamp": "2026-08-01T23:08:20.332Z", "date_only": false, "value": "2026-08-01T23:08:20.332361Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2lkskyy62l", "record": "CVE-2026-67331", "field": "creation_timestamp", "uuid": "9a8f17a8-eb2d-4e3d-ba1e-3612f872da9d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67331 \u0432 better-auth SCIM: \u0443\u0433\u0440\u043e\u0437\u044b \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/7204ADBB-27AE-4411-8766-A41776C11A2E", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2lkskyy62l"}, {"timestamp": "2026-08-02T15:07:19.388Z", "date_only": false, "value": "2026-08-02T15:07:19.388260Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/hugovalters/statuses/117026536615147442", "record": "CVE-2026-67331", "field": "creation_timestamp", "uuid": "3130577d-5b89-44db-a931-d5a422ff3956", "content": "CVE-2026-67331 - Critical auth flaw in Better-Auth SCIM. Unbound providers let attackers steal tokens, hijack SCIM API access. CVSS 8.3. Unpatched - update immediately if affected. #CVE #infosec #BetterAuth\nhttps://www.valtersit.com/cve/CVE-2026-67331/", "url": "https://mastodon.social/users/hugovalters/statuses/117026536615147442"}, {"timestamp": "2026-08-03T17:46:33.931Z", "date_only": false, "value": "2026-08-03T17:46:33.931598Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-67331", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-03T17:46:33.931Z", "date_only": false, "value": "2026-08-03T17:46:33.931598Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-67331", "record": "FKIE_CVE-2026-67331", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-03T17:46:41.923Z", "date_only": false, "value": "2026-08-03T17:46:41.923Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-67331", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-08T15:24:09.956Z", "date_only": false, "value": "2026-10-08T15:24:09.956Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-67331", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-08T15:24:09.956Z", "date_only": false, "value": "2026-10-08T15:24:09.956Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-67331", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-23T23:10:00.157Z", "date_only": false, "value": "2026-10-23T23:10:00.157", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-67331", "record": "FKIE_CVE-2026-67331", "field": "lastModified"}], "metrics": {"as_of": "2026-10-31T23:30:06.563Z", "anchors": {"origin": {"timestamp": "2026-05-31T00:00:00Z", "date_only": false, "value": "2026-05-31T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-67331", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-05-31T00:00:00Z", "date_only": false, "value": "2026-05-31T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-67331", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 13303806.563405, "hours": 3695.5018231680556, "days": 153.9792426320023, "min_seconds": 13217406.563405, "max_seconds": 13303806.563405, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-31T00:00:00Z", "date_only": false, "value": "2026-05-31T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-67331", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-31T23:30:06.563Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}