{"metadata": {"vulnerability": "CVE-2026-9689", "count": 218, "kinds": {"milestone": 9, "sighting": 2, "kev": 0, "other": 207}, "linked_omitted": 0}, "data": [{"timestamp": "2026-03-23T08:01:10.722Z", "date_only": false, "value": "2026-03-23T08:01:10.722000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2026-03-23T08:01:10.722Z", "date_only": false, "value": "2026-03-23T08:01:10.722000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2026-03-23T08:01:10.722Z", "date_only": false, "value": "2026-03-23T08:01:10.722000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2026-04-20T12:34:00Z", "date_only": false, "value": "2026-04-20T12:34:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2026-04-20T12:34:00Z", "date_only": false, "value": "2026-04-20T12:34:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2026-04-20T12:34:00Z", "date_only": false, "value": "2026-04-20T12:34:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2026-05-19T00:00:00Z", "date_only": false, "value": "2026-05-19T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.4.release_date", "linked_record": true}, {"timestamp": "2026-05-19T00:00:00Z", "date_only": false, "value": "2026-05-19T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.4.release_date", "linked_record": true}, {"timestamp": "2026-05-27T09:27:30.349Z", "date_only": false, "value": "2026-05-27T09:27:30.349026+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-27T09:27:30.349Z", "date_only": false, "value": "2026-05-27T09:27:30.349026+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-27T09:27:30.349Z", "date_only": false, "value": "2026-05-27T09:27:30.349026+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-27T09:27:30.349Z", "date_only": false, "value": "2026-05-27T09:27:30.349026+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-27T09:27:30.349Z", "date_only": false, "value": "2026-05-27T09:27:30.349Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / redhat", "record": "CVE-2026-9689", "field": "containers.cna.timeline.0.time", "text": "Reported to Red Hat."}, {"timestamp": "2026-05-27T10:14:17.955Z", "date_only": false, "value": "2026-05-27T10:14:17.955Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-9689", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-05-27T10:18:25.611Z", "date_only": false, "value": "2026-05-27T10:18:25.611Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat", "record": "CVE-2026-9689", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-27T10:18:25.611Z", "date_only": false, "value": "2026-05-27T10:18:25.611000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.1.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-27T10:18:25.611Z", "date_only": false, "value": "2026-05-27T10:18:25.611000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.1.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-27T10:18:25.611Z", "date_only": false, "value": "2026-05-27T10:18:25.611000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.1.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-27T10:18:25.611Z", "date_only": false, "value": "2026-05-27T10:18:25.611000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-27T10:18:25.611Z", "date_only": false, "value": "2026-05-27T10:18:25.611Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / redhat", "record": "CVE-2026-9689", "field": "containers.cna.timeline.1.time", "text": "Made public."}, {"timestamp": "2026-05-27T10:35:03.018Z", "date_only": false, "value": "2026-05-27T10:35:03.018Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-9689", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-27T12:17:15Z", "date_only": false, "value": "2026-05-27T12:17:15Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WCVJ-VPVW-9RR5", "record": "GHSA-WCVJ-VPVW-9RR5", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-05-27T12:17:15.513Z", "date_only": false, "value": "2026-05-27T12:17:15.513", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-9689", "record": "FKIE_CVE-2026-9689", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-27T12:31:24Z", "date_only": false, "value": "2026-05-27T12:31:24Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WCVJ-VPVW-9RR5", "record": "GHSA-WCVJ-VPVW-9RR5", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-27T14:45:36.377Z", "date_only": false, "value": "2026-05-27T14:45:36.377913Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-9689", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-05-27T14:45:36.377Z", "date_only": false, "value": "2026-05-27T14:45:36.377913Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-9689", "record": "FKIE_CVE-2026-9689", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-05-27T14:46:20.866Z", "date_only": false, "value": "2026-05-27T14:46:20.866Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-9689", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-27T22:00:00Z", "date_only": false, "value": "2026-05-27T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1708", "record": "WID-SEC-W-2026-1708", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-05-27T22:00:00Z", "date_only": false, "value": "2026-05-27T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1708", "record": "WID-SEC-W-2026-1708", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-27T22:00:00Z", "date_only": false, "value": "2026-05-27T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1708", "record": "WID-SEC-W-2026-1708", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-28T03:11:22.531Z", "date_only": false, "value": "2026-05-28T03:11:22.531000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.2.discovery_date", "linked_record": true}, {"timestamp": "2026-05-28T03:11:22.531Z", "date_only": false, "value": "2026-05-28T03:11:22.531000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.2.discovery_date", "linked_record": true}, {"timestamp": "2026-05-28T03:11:22.531Z", "date_only": false, "value": "2026-05-28T03:11:22.531000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.2.discovery_date", "linked_record": true}, {"timestamp": "2026-05-28T03:11:22.531Z", "date_only": false, "value": "2026-05-28T03:11:22.531000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2026-05-28T03:12:28.340Z", "date_only": false, "value": "2026-05-28T03:12:28.340000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2026-05-28T03:12:28.340Z", "date_only": false, "value": "2026-05-28T03:12:28.340000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2026-05-28T03:12:28.340Z", "date_only": false, "value": "2026-05-28T03:12:28.340000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2026-05-28T03:12:28.340Z", "date_only": false, "value": "2026-05-28T03:12:28.340000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2026-05-28T03:49:51.972Z", "date_only": false, "value": "2026-05-28T03:49:51.972000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.3.discovery_date", "linked_record": true}, {"timestamp": "2026-05-28T03:49:51.972Z", "date_only": false, "value": "2026-05-28T03:49:51.972000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.3.discovery_date", "linked_record": true}, {"timestamp": "2026-05-28T03:49:51.972Z", "date_only": false, "value": "2026-05-28T03:49:51.972000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.3.discovery_date", "linked_record": true}, {"timestamp": "2026-05-28T03:49:51.972Z", "date_only": false, "value": "2026-05-28T03:49:51.972000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.2.discovery_date", "linked_record": true}, {"timestamp": "2026-05-28T03:53:01.734Z", "date_only": false, "value": "2026-05-28T03:53:01.734000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.3.release_date", "linked_record": true}, {"timestamp": "2026-05-28T03:53:01.734Z", "date_only": false, "value": "2026-05-28T03:53:01.734000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.3.release_date", "linked_record": true}, {"timestamp": "2026-05-28T03:53:01.734Z", "date_only": false, "value": "2026-05-28T03:53:01.734000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.3.release_date", "linked_record": true}, {"timestamp": "2026-05-28T03:53:01.734Z", "date_only": false, "value": "2026-05-28T03:53:01.734000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2026-05-28T03:57:56.111Z", "date_only": false, "value": "2026-05-28T03:57:56.111000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.4.discovery_date", "linked_record": true}, {"timestamp": "2026-05-28T03:57:56.111Z", "date_only": false, "value": "2026-05-28T03:57:56.111000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.4.discovery_date", "linked_record": true}, {"timestamp": "2026-05-28T11:39:38.991Z", "date_only": false, "value": "2026-05-28T11:39:38.991915Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mmvwril4cs2o", "record": "CVE-2026-9689", "field": "creation_timestamp", "uuid": "742196b6-6f18-4ff3-81e0-dba439452716", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-9689\n\nA flaw was found in Keycloak, an open-source identity and access management solution. When a client application is configured to accept broad redir...", "url": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mmvwril4cs2o"}, {"timestamp": "2026-06-04T22:00:00Z", "date_only": false, "value": "2026-06-04T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1708", "record": "WID-SEC-W-2026-1708", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-06-08T18:22:02Z", "date_only": false, "value": "2026-06-08T18:22:02+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.4.discovery_date", "linked_record": true}, {"timestamp": "2026-06-08T18:22:02Z", "date_only": false, "value": "2026-06-08T18:22:02+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.3.discovery_date", "linked_record": true}, {"timestamp": "2026-06-09T03:46:54.131Z", "date_only": false, "value": "2026-06-09T03:46:54.131000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.18.release_date", "linked_record": true}, {"timestamp": "2026-06-09T03:46:54.131Z", "date_only": false, "value": "2026-06-09T03:46:54.131000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.15.release_date", "linked_record": true}, {"timestamp": "2026-06-09T03:47:46.447Z", "date_only": false, "value": "2026-06-09T03:47:46.447000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.19.release_date", "linked_record": true}, {"timestamp": "2026-06-09T03:47:46.447Z", "date_only": false, "value": "2026-06-09T03:47:46.447000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.16.release_date", "linked_record": true}, {"timestamp": "2026-06-09T05:00:52.290Z", "date_only": false, "value": "2026-06-09T05:00:52.290020+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.18.discovery_date", "linked_record": true}, {"timestamp": "2026-06-09T05:00:52.290Z", "date_only": false, "value": "2026-06-09T05:00:52.290020+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.15.discovery_date", "linked_record": true}, {"timestamp": "2026-06-09T05:01:51.700Z", "date_only": false, "value": "2026-06-09T05:01:51.700197+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.19.discovery_date", "linked_record": true}, {"timestamp": "2026-06-09T05:01:51.700Z", "date_only": false, "value": "2026-06-09T05:01:51.700197+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.16.discovery_date", "linked_record": true}, {"timestamp": "2026-06-10T22:00:00Z", "date_only": false, "value": "2026-06-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1708", "record": "WID-SEC-W-2026-1708", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-06-11T14:17:32.078Z", "date_only": false, "value": "2026-06-11T14:17:32.078000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.4.release_date", "linked_record": true}, {"timestamp": "2026-06-11T14:17:32.078Z", "date_only": false, "value": "2026-06-11T14:17:32.078000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.3.release_date", "linked_record": true}, {"timestamp": "2026-06-23T20:53:52.543Z", "date_only": false, "value": "2026-06-23T20:53:52.543000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.18.release_date", "linked_record": true}, {"timestamp": "2026-06-23T20:53:52.543Z", "date_only": false, "value": "2026-06-23T20:53:52.543000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.16.release_date", "linked_record": true}, {"timestamp": "2026-06-23T20:53:52.543Z", "date_only": false, "value": "2026-06-23T20:53:52.543000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.21.release_date", "linked_record": true}, {"timestamp": "2026-06-23T20:53:52.543Z", "date_only": false, "value": "2026-06-23T20:53:52.543000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.18.release_date", "linked_record": true}, {"timestamp": "2026-06-23T20:56:36.646Z", "date_only": false, "value": "2026-06-23T20:56:36.646000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.17.release_date", "linked_record": true}, {"timestamp": "2026-06-23T20:56:36.646Z", "date_only": false, "value": "2026-06-23T20:56:36.646000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.15.release_date", "linked_record": true}, {"timestamp": "2026-06-23T20:56:36.646Z", "date_only": false, "value": "2026-06-23T20:56:36.646000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.20.release_date", "linked_record": true}, {"timestamp": "2026-06-23T20:56:36.646Z", "date_only": false, "value": "2026-06-23T20:56:36.646000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.17.release_date", "linked_record": true}, {"timestamp": "2026-06-23T22:01:34.437Z", "date_only": false, "value": "2026-06-23T22:01:34.437620+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.18.discovery_date", "linked_record": true}, {"timestamp": "2026-06-23T22:01:34.437Z", "date_only": false, "value": "2026-06-23T22:01:34.437620+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.16.discovery_date", "linked_record": true}, {"timestamp": "2026-06-23T22:01:34.437Z", "date_only": false, "value": "2026-06-23T22:01:34.437620+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.21.discovery_date", "linked_record": true}, {"timestamp": "2026-06-23T22:01:34.437Z", "date_only": false, "value": "2026-06-23T22:01:34.437620+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.18.discovery_date", "linked_record": true}, {"timestamp": "2026-06-23T22:01:49.821Z", "date_only": false, "value": "2026-06-23T22:01:49.821346+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.17.discovery_date", "linked_record": true}, {"timestamp": "2026-06-23T22:01:49.821Z", "date_only": false, "value": "2026-06-23T22:01:49.821346+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.15.discovery_date", "linked_record": true}, {"timestamp": "2026-06-23T22:01:49.821Z", "date_only": false, "value": "2026-06-23T22:01:49.821346+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.20.discovery_date", "linked_record": true}, {"timestamp": "2026-06-23T22:01:49.821Z", "date_only": false, "value": "2026-06-23T22:01:49.821346+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.17.discovery_date", "linked_record": true}, {"timestamp": "2026-06-25T22:00:00Z", "date_only": false, "value": "2026-06-25T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1708", "record": "WID-SEC-W-2026-1708", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-06-29T20:54:20Z", "date_only": false, "value": "2026-06-29T20:54:20+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.5.discovery_date", "linked_record": true}, {"timestamp": "2026-06-29T20:54:20Z", "date_only": false, "value": "2026-06-29T20:54:20+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.5.discovery_date", "linked_record": true}, {"timestamp": "2026-06-29T20:54:20Z", "date_only": false, "value": "2026-06-29T20:54:20+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.5.discovery_date", "linked_record": true}, {"timestamp": "2026-06-29T20:54:20Z", "date_only": false, "value": "2026-06-29T20:54:20+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.4.discovery_date", "linked_record": true}, {"timestamp": "2026-06-30T11:08:07.532Z", "date_only": false, "value": "2026-06-30T11:08:07.532000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.5.release_date", "linked_record": true}, {"timestamp": "2026-06-30T11:08:07.532Z", "date_only": false, "value": "2026-06-30T11:08:07.532000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.5.release_date", "linked_record": true}, {"timestamp": "2026-06-30T11:08:07.532Z", "date_only": false, "value": "2026-06-30T11:08:07.532000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.5.release_date", "linked_record": true}, {"timestamp": "2026-06-30T11:08:07.532Z", "date_only": false, "value": "2026-06-30T11:08:07.532000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.4.release_date", "linked_record": true}, {"timestamp": "2026-07-02T17:39:04Z", "date_only": false, "value": "2026-07-02T17:39:04+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.6.discovery_date", "linked_record": true}, {"timestamp": "2026-07-02T17:39:04Z", "date_only": false, "value": "2026-07-02T17:39:04+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.6.discovery_date", "linked_record": true}, {"timestamp": "2026-07-02T17:39:04Z", "date_only": false, "value": "2026-07-02T17:39:04+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.6.discovery_date", "linked_record": true}, {"timestamp": "2026-07-02T17:39:04Z", "date_only": false, "value": "2026-07-02T17:39:04+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.5.discovery_date", "linked_record": true}, {"timestamp": "2026-07-02T17:46:15Z", "date_only": false, "value": "2026-07-02T17:46:15+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.7.discovery_date", "linked_record": true}, {"timestamp": "2026-07-02T17:46:15Z", "date_only": false, "value": "2026-07-02T17:46:15+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.7.discovery_date", "linked_record": true}, {"timestamp": "2026-07-02T17:46:15Z", "date_only": false, "value": "2026-07-02T17:46:15+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.7.discovery_date", "linked_record": true}, {"timestamp": "2026-07-02T17:46:15Z", "date_only": false, "value": "2026-07-02T17:46:15+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.6.discovery_date", "linked_record": true}, {"timestamp": "2026-07-03T15:21:06.261Z", "date_only": false, "value": "2026-07-03T15:21:06.261000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.6.release_date", "linked_record": true}, {"timestamp": "2026-07-03T15:21:06.261Z", "date_only": false, "value": "2026-07-03T15:21:06.261000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.6.release_date", "linked_record": true}, {"timestamp": "2026-07-03T15:21:06.261Z", "date_only": false, "value": "2026-07-03T15:21:06.261000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.6.release_date", "linked_record": true}, {"timestamp": "2026-07-03T15:21:06.261Z", "date_only": false, "value": "2026-07-03T15:21:06.261000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.5.release_date", "linked_record": true}, {"timestamp": "2026-07-03T15:37:56.396Z", "date_only": false, "value": "2026-07-03T15:37:56.396000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.7.release_date", "linked_record": true}, {"timestamp": "2026-07-03T15:37:56.396Z", "date_only": false, "value": "2026-07-03T15:37:56.396000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.7.release_date", "linked_record": true}, {"timestamp": "2026-07-03T15:37:56.396Z", "date_only": false, "value": "2026-07-03T15:37:56.396000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.7.release_date", "linked_record": true}, {"timestamp": "2026-07-03T15:37:56.396Z", "date_only": false, "value": "2026-07-03T15:37:56.396000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.6.release_date", "linked_record": true}, {"timestamp": "2026-07-06T23:22:09Z", "date_only": false, "value": "2026-07-06T23:22:09+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.11.discovery_date", "linked_record": true}, {"timestamp": "2026-07-06T23:22:09Z", "date_only": false, "value": "2026-07-06T23:22:09+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.9.discovery_date", "linked_record": true}, {"timestamp": "2026-07-06T23:22:09Z", "date_only": false, "value": "2026-07-06T23:22:09+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.11.discovery_date", "linked_record": true}, {"timestamp": "2026-07-06T23:22:09Z", "date_only": false, "value": "2026-07-06T23:22:09+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.8.discovery_date", "linked_record": true}, {"timestamp": "2026-07-06T23:27:45Z", "date_only": false, "value": "2026-07-06T23:27:45+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.10.discovery_date", "linked_record": true}, {"timestamp": "2026-07-06T23:27:45Z", "date_only": false, "value": "2026-07-06T23:27:45+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.8.discovery_date", "linked_record": true}, {"timestamp": "2026-07-06T23:27:45Z", "date_only": false, "value": "2026-07-06T23:27:45+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.10.discovery_date", "linked_record": true}, {"timestamp": "2026-07-06T23:27:45Z", "date_only": false, "value": "2026-07-06T23:27:45+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.7.discovery_date", "linked_record": true}, {"timestamp": "2026-07-08T22:00:00Z", "date_only": false, "value": "2026-07-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1708", "record": "WID-SEC-W-2026-1708", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2026-07-09T00:00:00Z", "date_only": false, "value": "2026-07-09T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.25.discovery_date", "linked_record": true}, {"timestamp": "2026-07-09T00:00:00Z", "date_only": false, "value": "2026-07-09T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.28.discovery_date", "linked_record": true}, {"timestamp": "2026-07-09T00:00:00Z", "date_only": false, "value": "2026-07-09T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.25.release_date", "linked_record": true}, {"timestamp": "2026-07-09T00:00:00Z", "date_only": false, "value": "2026-07-09T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.28.release_date", "linked_record": true}, {"timestamp": "2026-07-14T08:09:12.951Z", "date_only": false, "value": "2026-07-14T08:09:12.951000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.9.release_date", "linked_record": true}, {"timestamp": "2026-07-14T08:09:12.951Z", "date_only": false, "value": "2026-07-14T08:09:12.951000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.9.release_date", "linked_record": true}, {"timestamp": "2026-07-14T08:15:53.650Z", "date_only": false, "value": "2026-07-14T08:15:53.650000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.8.release_date", "linked_record": true}, {"timestamp": "2026-07-14T08:15:53.650Z", "date_only": false, "value": "2026-07-14T08:15:53.650000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.8.release_date", "linked_record": true}, {"timestamp": "2026-07-14T09:00:58.070Z", "date_only": false, "value": "2026-07-14T09:00:58.070373+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.9.discovery_date", "linked_record": true}, {"timestamp": "2026-07-14T09:00:58.070Z", "date_only": false, "value": "2026-07-14T09:00:58.070373+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.9.discovery_date", "linked_record": true}, {"timestamp": "2026-07-14T09:01:12.413Z", "date_only": false, "value": "2026-07-14T09:01:12.413297+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.8.discovery_date", "linked_record": true}, {"timestamp": "2026-07-14T09:01:12.413Z", "date_only": false, "value": "2026-07-14T09:01:12.413297+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.8.discovery_date", "linked_record": true}, {"timestamp": "2026-07-14T17:46:38Z", "date_only": false, "value": "2026-07-14T17:46:38+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.13.discovery_date", "linked_record": true}, {"timestamp": "2026-07-14T17:46:38Z", "date_only": false, "value": "2026-07-14T17:46:38+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.10.discovery_date", "linked_record": true}, {"timestamp": "2026-07-15T12:14:36Z", "date_only": false, "value": "2026-07-15T12:14:36+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.13.discovery_date", "linked_record": true}, {"timestamp": "2026-07-15T12:14:36Z", "date_only": false, "value": "2026-07-15T12:14:36+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.11.discovery_date", "linked_record": true}, {"timestamp": "2026-07-15T12:14:36Z", "date_only": false, "value": "2026-07-15T12:14:36+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.14.discovery_date", "linked_record": true}, {"timestamp": "2026-07-15T12:14:36Z", "date_only": false, "value": "2026-07-15T12:14:36+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.11.discovery_date", "linked_record": true}, {"timestamp": "2026-07-17T12:36:21Z", "date_only": false, "value": "2026-07-17T12:36:21+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.12.discovery_date", "linked_record": true}, {"timestamp": "2026-07-17T12:36:21Z", "date_only": false, "value": "2026-07-17T12:36:21+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.10.discovery_date", "linked_record": true}, {"timestamp": "2026-07-17T12:36:21Z", "date_only": false, "value": "2026-07-17T12:36:21+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.12.discovery_date", "linked_record": true}, {"timestamp": "2026-07-17T12:36:21Z", "date_only": false, "value": "2026-07-17T12:36:21+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.9.discovery_date", "linked_record": true}, {"timestamp": "2026-07-17T17:57:04Z", "date_only": false, "value": "2026-07-17T17:57:04+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.16.discovery_date", "linked_record": true}, {"timestamp": "2026-07-17T17:57:04Z", "date_only": false, "value": "2026-07-17T17:57:04+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.14.discovery_date", "linked_record": true}, {"timestamp": "2026-07-17T17:57:04Z", "date_only": false, "value": "2026-07-17T17:57:04+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.17.discovery_date", "linked_record": true}, {"timestamp": "2026-07-17T17:57:04Z", "date_only": false, "value": "2026-07-17T17:57:04+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.14.discovery_date", "linked_record": true}, {"timestamp": "2026-07-17T18:19:22Z", "date_only": false, "value": "2026-07-17T18:19:22+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.15.discovery_date", "linked_record": true}, {"timestamp": "2026-07-17T18:19:22Z", "date_only": false, "value": "2026-07-17T18:19:22+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.13.discovery_date", "linked_record": true}, {"timestamp": "2026-07-17T18:19:22Z", "date_only": false, "value": "2026-07-17T18:19:22+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.16.discovery_date", "linked_record": true}, {"timestamp": "2026-07-17T18:19:22Z", "date_only": false, "value": "2026-07-17T18:19:22+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.13.discovery_date", "linked_record": true}, {"timestamp": "2026-07-20T23:00:31.859Z", "date_only": false, "value": "2026-07-20T23:00:31.859000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.19.release_date", "linked_record": true}, {"timestamp": "2026-07-20T23:00:31.859Z", "date_only": false, "value": "2026-07-20T23:00:31.859000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.22.release_date", "linked_record": true}, {"timestamp": "2026-07-20T23:18:07.893Z", "date_only": false, "value": "2026-07-20T23:18:07.893000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.20.release_date", "linked_record": true}, {"timestamp": "2026-07-20T23:18:07.893Z", "date_only": false, "value": "2026-07-20T23:18:07.893000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.23.release_date", "linked_record": true}, {"timestamp": "2026-07-21T00:01:25.203Z", "date_only": false, "value": "2026-07-21T00:01:25.203265+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.20.discovery_date", "linked_record": true}, {"timestamp": "2026-07-21T00:01:25.203Z", "date_only": false, "value": "2026-07-21T00:01:25.203265+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.23.discovery_date", "linked_record": true}, {"timestamp": "2026-07-21T00:02:57.305Z", "date_only": false, "value": "2026-07-21T00:02:57.305291+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.19.discovery_date", "linked_record": true}, {"timestamp": "2026-07-21T00:02:57.305Z", "date_only": false, "value": "2026-07-21T00:02:57.305291+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.22.discovery_date", "linked_record": true}, {"timestamp": "2026-07-21T21:22:34.879Z", "date_only": false, "value": "2026-07-21T21:22:34.879000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.21.release_date", "linked_record": true}, {"timestamp": "2026-07-21T21:22:34.879Z", "date_only": false, "value": "2026-07-21T21:22:34.879000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.24.release_date", "linked_record": true}, {"timestamp": "2026-07-21T21:31:25.307Z", "date_only": false, "value": "2026-07-21T21:31:25.307000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.22.release_date", "linked_record": true}, {"timestamp": "2026-07-21T21:31:25.307Z", "date_only": false, "value": "2026-07-21T21:31:25.307000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.25.release_date", "linked_record": true}, {"timestamp": "2026-07-21T21:36:18.627Z", "date_only": false, "value": "2026-07-21T21:36:18.627000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.23.release_date", "linked_record": true}, {"timestamp": "2026-07-21T21:36:18.627Z", "date_only": false, "value": "2026-07-21T21:36:18.627000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.26.release_date", "linked_record": true}, {"timestamp": "2026-07-21T22:11:17.470Z", "date_only": false, "value": "2026-07-21T22:11:17.470000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.24.release_date", "linked_record": true}, {"timestamp": "2026-07-21T22:11:17.470Z", "date_only": false, "value": "2026-07-21T22:11:17.470000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.27.release_date", "linked_record": true}, {"timestamp": "2026-07-21T22:30:30.983Z", "date_only": false, "value": "2026-07-21T22:30:30.983812+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.23.discovery_date", "linked_record": true}, {"timestamp": "2026-07-21T22:30:30.983Z", "date_only": false, "value": "2026-07-21T22:30:30.983812+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.26.discovery_date", "linked_record": true}, {"timestamp": "2026-07-21T22:43:00.311Z", "date_only": false, "value": "2026-07-21T22:43:00.311516+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.21.discovery_date", "linked_record": true}, {"timestamp": "2026-07-21T22:43:00.311Z", "date_only": false, "value": "2026-07-21T22:43:00.311516+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.24.discovery_date", "linked_record": true}, {"timestamp": "2026-07-21T22:52:47.296Z", "date_only": false, "value": "2026-07-21T22:52:47.296001+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.22.discovery_date", "linked_record": true}, {"timestamp": "2026-07-21T22:52:47.296Z", "date_only": false, "value": "2026-07-21T22:52:47.296001+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.25.discovery_date", "linked_record": true}, {"timestamp": "2026-07-21T23:03:36.448Z", "date_only": false, "value": "2026-07-21T23:03:36.448652+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.24.discovery_date", "linked_record": true}, {"timestamp": "2026-07-21T23:03:36.448Z", "date_only": false, "value": "2026-07-21T23:03:36.448652+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.27.discovery_date", "linked_record": true}, {"timestamp": "2026-07-23T09:57:24.306Z", "date_only": false, "value": "2026-07-23T09:57:24.306000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.14.discovery_date", "linked_record": true}, {"timestamp": "2026-07-23T09:57:24.306Z", "date_only": false, "value": "2026-07-23T09:57:24.306000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.12.discovery_date", "linked_record": true}, {"timestamp": "2026-07-23T09:57:24.306Z", "date_only": false, "value": "2026-07-23T09:57:24.306000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.15.discovery_date", "linked_record": true}, {"timestamp": "2026-07-23T09:57:24.306Z", "date_only": false, "value": "2026-07-23T09:57:24.306000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.12.discovery_date", "linked_record": true}, {"timestamp": "2026-07-29T13:19:42.315Z", "date_only": false, "value": "2026-07-29T13:19:42.315000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.14.release_date", "linked_record": true}, {"timestamp": "2026-07-29T13:19:42.315Z", "date_only": false, "value": "2026-07-29T13:19:42.315000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.12.release_date", "linked_record": true}, {"timestamp": "2026-07-29T13:19:42.315Z", "date_only": false, "value": "2026-07-29T13:19:42.315000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.15.release_date", "linked_record": true}, {"timestamp": "2026-07-29T13:19:42.315Z", "date_only": false, "value": "2026-07-29T13:19:42.315000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.12.release_date", "linked_record": true}, {"timestamp": "2026-08-05T02:02:00Z", "date_only": false, "value": "2026-08-05T02:02:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.10.release_date", "linked_record": true}, {"timestamp": "2026-08-05T02:02:00Z", "date_only": false, "value": "2026-08-05T02:02:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.8.release_date", "linked_record": true}, {"timestamp": "2026-08-05T02:02:00Z", "date_only": false, "value": "2026-08-05T02:02:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.10.release_date", "linked_record": true}, {"timestamp": "2026-08-05T02:02:00Z", "date_only": false, "value": "2026-08-05T02:02:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.7.release_date", "linked_record": true}, {"timestamp": "2026-08-05T13:39:33.779Z", "date_only": false, "value": "2026-08-05T13:39:33.779000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.16.release_date", "linked_record": true}, {"timestamp": "2026-08-05T13:39:33.779Z", "date_only": false, "value": "2026-08-05T13:39:33.779000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.14.release_date", "linked_record": true}, {"timestamp": "2026-08-05T13:39:33.779Z", "date_only": false, "value": "2026-08-05T13:39:33.779000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.17.release_date", "linked_record": true}, {"timestamp": "2026-08-05T13:39:33.779Z", "date_only": false, "value": "2026-08-05T13:39:33.779000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.14.release_date", "linked_record": true}, {"timestamp": "2026-08-05T16:17:28Z", "date_only": false, "value": "2026-08-05T16:17:28+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-08-05T16:17:28Z", "date_only": false, "value": "2026-08-05T16:17:28+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-05T16:17:28Z", "date_only": false, "value": "2026-08-05T16:17:28+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-05T16:17:59Z", "date_only": false, "value": "2026-08-05T16:17:59+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-08-05T16:17:59Z", "date_only": false, "value": "2026-08-05T16:17:59+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-05T16:17:59Z", "date_only": false, "value": "2026-08-05T16:17:59+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-05T16:20:00Z", "date_only": false, "value": "2026-08-05T16:20:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-08-05T16:20:00Z", "date_only": false, "value": "2026-08-05T16:20:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-05T16:20:00Z", "date_only": false, "value": "2026-08-05T16:20:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-05T16:20:31Z", "date_only": false, "value": "2026-08-05T16:20:31+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-08-05T16:20:31Z", "date_only": false, "value": "2026-08-05T16:20:31+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-05T16:20:31Z", "date_only": false, "value": "2026-08-05T16:20:31+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-05T18:31:20Z", "date_only": false, "value": "2026-08-05T18:31:20Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WCVJ-VPVW-9RR5", "record": "GHSA-WCVJ-VPVW-9RR5", "field": "modified", "linked_record": true}, {"timestamp": "2026-08-05T22:00:00Z", "date_only": false, "value": "2026-08-05T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1708", "record": "WID-SEC-W-2026-1708", "field": "document.tracking.revision_history.5.date", "linked_record": true}, {"timestamp": "2026-08-18T22:00:00Z", "date_only": false, "value": "2026-08-18T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1708", "record": "WID-SEC-W-2026-1708", "field": "document.tracking.revision_history.6.date", "linked_record": true}, {"timestamp": "2026-08-20T00:54:16.228Z", "date_only": false, "value": "2026-08-20T00:54:16.228Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-9689", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-20T00:54:16.228Z", "date_only": false, "value": "2026-08-20T00:54:16.228Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat", "record": "CVE-2026-9689", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-30T22:00:00Z", "date_only": false, "value": "2026-08-30T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1708", "record": "WID-SEC-W-2026-1708", "field": "document.tracking.revision_history.7.date", "linked_record": true}, {"timestamp": "2026-09-24T12:48:14Z", "date_only": false, "value": "2026-09-24T12:48:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/m-claassen-at-nieuwestroom/aa4b9037c2c04c14d9d1f3b739afee8d", "record": "CVE-2026-9689", "field": "creation_timestamp", "uuid": "e534d73e-9f2a-448b-a4c7-2dae03fa6ead", "content": "# Magic-link login fails with `Invalid parameter: redirect_uri` since Keycloak 26.6.5\n\nA minimal reproduction using an unmodified `quay.io/phasetwo/phasetwo-keycloak` image, a throwaway\nrealm, and a one-page keycloak-js SPA. No custom providers or themes.\n\n## Run it\n\n```bash\nnpm install && npx playwright install chromium\nKC_TAG=26.6.6 docker compose up -d        # Keycloak on :8080, SPA on :8000\n./repro-curl.sh                           # isolates the redirect_uri validation (no browser)\nnode repro-browser.mjs                    # full magic-link flow -> fails\nnode repro-browser.mjs --workaround       # same flow, SPA strips stale callback params -> works\nKC_TAG=26.6.4 docker compose up -d --force-recreate keycloak && node repro-browser.mjs   # -> works\n./repro-curl.sh matrix                    # redirect_uri probe across image versions\n./list-providers.sh 26.6.4 26.6.6         # bundled extension versions per image\n```\n\n## What happens\n\n`repro-browser.mjs` creates a user with the built-in `UPDATE_PASSWORD` required action. It then\ncalls `POST /realms/repro/magic-link` (`client_id=frontend`, `redirect_uri=http://localhost:8000/`,\n`send_email=false`), opens the link, sets a password, and follows the browser.\n\n1. `GET /login-actions/action-token?key=\u2026` \u2192 302 to `required-action?\u2026&client_data=`\n   `{\"ru\":\"http://localhost:8000/\",\"rt\":\"code\"}`. The auth session has **no `response_mode` and no\n   `state`**.\n2. `POST /login-actions/required-action` (password set) \u2192 302 to\n   `http://localhost:8000/?session_state=\u2026&iss=\u2026&code=\u2026`. This is a **query-mode** callback\n   **without `state`**.\n3. keycloak-js (`onLoad: 'login-required'`, default `responseMode: 'fragment'`) only parses\n   `location.hash`, so it doesn't recognise this as a callback. It leaves the URL as is and starts a\n   new login with `redirect_uri = location.href`, which is the URL that still contains\n   `?session_state=\u2026&iss=\u2026&code=\u2026`.\n4. **26.6.4:** the wildcard `http://localhost:8000/*` accepts that URI. Keycloak appends a second\n   response (`?\u2026code=X#state=\u2026&code=Y`) and the login succeeds.\n   **26.6.5+:** the CVE-2026-9689 guard rejects any `redirect_uri` containing `code`, `state`,\n   `iss`, `session_state`, \u2026 \u2192 `400 Invalid parameter: redirect_uri` (`LOGIN_ERROR`,\n   `invalid_redirect_uri`).\n\n## Results\n\n| Image | `redirect_uri=http://localhost:8000/?code=\u2026` (curl) | Magic-link flow | With SPA workaround |\n| --- | --- | --- | --- |\n| `quay.io/keycloak/keycloak:26.6.4` | 200 accepted | n/a (no magic-link extension) | n/a |\n| `phasetwo-keycloak:26.6.4` | 200 accepted | logged in | logged in |\n| `phasetwo-keycloak:26.6.5` | **400** | (not run; same core guard) | \u2014 |\n| `phasetwo-keycloak:26.6.6` | **400** | **`Invalid parameter: redirect_uri`** | logged in |\n\n`foo=bar` is accepted on every version. Each of `code`, `state`, `iss` and `session_state` on its\nown is enough to be rejected on 26.6.5+ (see `curl-matrix.txt`). Upstream never published\n`quay.io/keycloak/keycloak` images for 26.6.5/26.6.6.\n\nBundled versions: `keycloak-magic-link` is **0.75 in all three images**. Between 26.6.4 and 26.6.5\nonly Keycloak core (26.6.4 \u2192 26.6.5) and `keycloak-orgs` (0.172 \u2192 0.173) change.\n\n## Analysis\n\n- The new rejection is intended upstream behaviour: CVE-2026-9689 /\n  [keycloak#49430](https://github.com/keycloak/keycloak/issues/49430), backported to 26.4.14,\n  26.6.5 and 26.7.0.\n- Upstream hit the same problem with organization invitations,\n  [keycloak#52157](https://github.com/keycloak/keycloak/issues/52157). They fixed it client-side in\n  [keycloak#52462](https://github.com/keycloak/keycloak/pull/52462): the admin/account consoles\n  strip `code`/`error` query params that arrive without `state` before `keycloak.init()`.\n- The magic-link extension builds an auth session without `response_mode` or `state`, so every\n  magic-link login ends in a query-mode, state-less callback. SPAs using keycloak-js in fragment\n  mode (the default) can't consume it, and since 26.6.5 they can't recover from it either.\n\n## Workaround (client-side)\n\nBefore `keycloak.init()`, remove the OIDC response params from the query string when they are\nclearly a foreign/unsolicited callback. See `index.html` (`?workaround=1`).\n\n---\n\n## Draft issue for p2-inc/keycloak-magic-link\n\n**Title:** Magic-link login returns a query-mode callback without `state`; since Keycloak 26.6.5\n(CVE-2026-9689) keycloak-js SPAs fail with `Invalid parameter: redirect_uri`\n\n**Versions:** `quay.io/phasetwo/phasetwo-keycloak` 26.6.5 and 26.6.6 (`keycloak-magic-link` 0.75),\nkeycloak-js 26.2.2. Works on 26.6.4 (same magic-link 0.75).\n\n**Steps:** see \"Run it\" above. Minimal realm, public client with `redirectUris: [\".../*\"]`, user\nwith `UPDATE_PASSWORD`, link from `POST /realms/{realm}/magic-link`.\n\n**Expected:** after completing the magic link and its required actions, a keycloak-js client using\nthe default `responseMode: 'fragment'` is logged in.\n\n**Actual:** the final redirect is `redirect_uri?session_state=\u2026&iss=\u2026&code=\u2026` (query mode, no\n`state`; `client_data` = `{\"ru\":\u2026,\"rt\":\"code\"}`). keycloak-js ignores it and re-authorizes with\n`redirect_uri = location.href`, and the CVE-2026-9689 guard rejects that with\n`invalid_redirect_uri`.\n\n**Related:** keycloak#49430 (CVE-2026-9689), keycloak#52157 / #52462 (the same symptom for\norganization invitations, fixed client-side in the consoles).\n\n**Suggestion:** let the magic-link API take `response_mode` (and optionally `state`/`nonce`) and\nstore them on the auth session, so SPAs can receive a callback they recognise. If that isn't\nfeasible, document that magic-link callbacks are unsolicited query-mode responses, and that SPAs\nmust strip them (as #52462 does) before initialising their OIDC client.\n", "url": "https://gist.github.com/m-claassen-at-nieuwestroom/aa4b9037c2c04c14d9d1f3b739afee8d"}, {"timestamp": "2026-10-26T11:10:00.157Z", "date_only": false, "value": "2026-10-26T11:10:00.157", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-9689", "record": "FKIE_CVE-2026-9689", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-05T16:48:28Z", "date_only": false, "value": "2026-11-05T16:48:28+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-05T16:48:28Z", "date_only": false, "value": "2026-11-05T16:48:28+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-05T16:48:28Z", "date_only": false, "value": "2026-11-05T16:48:28+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-05T16:48:28Z", "date_only": false, "value": "2026-11-05T16:48:28+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-05T16:48:28Z", "date_only": false, "value": "2026-11-05T16:48:28+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-05T16:48:28Z", "date_only": false, "value": "2026-11-05T16:48:28+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-05T20:36:58Z", "date_only": false, "value": "2026-11-05T20:36:58+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-05T20:36:58Z", "date_only": false, "value": "2026-11-05T20:36:58+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-05T20:36:58Z", "date_only": false, "value": "2026-11-05T20:36:58+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-05T20:36:58Z", "date_only": false, "value": "2026-11-05T20:36:58+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-05T20:36:58Z", "date_only": false, "value": "2026-11-05T20:36:58+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:50847", "record": "RHSA-2026:50847", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-05T20:36:58Z", "date_only": false, "value": "2026-11-05T20:36:58+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:50849", "record": "RHSA-2026:50849", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-08T23:00:00Z", "date_only": false, "value": "2026-11-08T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1708", "record": "WID-SEC-W-2026-1708", "field": "document.tracking.revision_history.8.date", "linked_record": true}, {"timestamp": "2026-11-08T23:00:00Z", "date_only": false, "value": "2026-11-08T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1708", "record": "WID-SEC-W-2026-1708", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-09T11:34:24.815Z", "date_only": false, "value": "2026-11-09T11:34:24.815+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1708", "record": "WID-SEC-W-2026-1708", "field": "document.tracking.generator.date", "linked_record": true}], "metrics": {"as_of": "2026-11-15T12:26:30.859Z", "anchors": {"origin": {"timestamp": "2026-05-27T09:27:30.349Z", "date_only": false, "value": "2026-05-27T09:27:30.349026+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "discovery": {"timestamp": "2026-05-27T09:27:30.349Z", "date_only": false, "value": "2026-05-27T09:27:30.349026+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-05-27T10:18:25.611Z", "date_only": false, "value": "2026-05-27T10:18:25.611000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.1.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": {"timestamp": "2026-08-05T16:17:28Z", "date_only": false, "value": "2026-08-05T16:17:28+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 6072597.651, "hours": 1686.8326808333331, "days": 70.28469503472222, "min_seconds": 6072597.651, "max_seconds": 6072597.651, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-27T09:27:30.349Z", "date_only": false, "value": "2026-05-27T09:27:30.349026+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-08-05T16:17:28Z", "date_only": false, "value": "2026-08-05T16:17:28+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, "discovery_after_disclosure": false}, "disclosure_to_patch": {"available": true, "seconds": 6069542.389, "hours": 1685.9839969444445, "days": 70.24933320601852, "min_seconds": 6069542.389, "max_seconds": 6069542.389, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-27T10:18:25.611Z", "date_only": false, "value": "2026-05-27T10:18:25.611000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.1.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-08-05T16:17:28Z", "date_only": false, "value": "2026-08-05T16:17:28+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 6072597.651, "hours": 1686.8326808333331, "days": 70.28469503472222, "min_seconds": 6072597.651, "max_seconds": 6072597.651, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-27T09:27:30.349Z", "date_only": false, "value": "2026-05-27T09:27:30.349026+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50846", "record": "RHSA-2026:50846", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-08-05T16:17:28Z", "date_only": false, "value": "2026-08-05T16:17:28+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:50848", "record": "RHSA-2026:50848", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}