{"metadata": {"vulnerability": "cve-2026-104817", "count": 11, "kinds": {"milestone": 3, "sighting": 2, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-10-02T14:17:09.334Z", "date_only": false, "value": "2026-10-02T14:17:09.334Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-104817", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-03T05:56:10.959Z", "date_only": false, "value": "2026-10-03T05:56:10.959060Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kakkokari-gtyih.misskey.io.ap.brid.gy/post/3mwx7adwdpml2", "record": "CVE-2026-104817", "field": "creation_timestamp", "uuid": "8006476f-2a13-455a-b399-a37ed8fd2a67", "content": "Misskey\u306e\u904e\u53bb\u306e\u8106\u5f31\u6027\u3001CVE ID\u3092\u7533\u8acb\u3057\u3066\u305f\u306e\u306b\u5168\u7136\u97f3\u6c99\u6c70\u306a\u304b\u3063\u305f\u3093\u3067\u3059\u304c\u3001\uff12\u30f6\u6708\u9045\u308c\u3067\u63a1\u756a\u3055\u308c\u305f\u3063\u307d\u3044\uff082026.7.0\u3067\u4fee\u6b63\u3055\u308c\u305f\u5206\uff09\n\nCVE-2026-103937\nhttps://github.com/misskey-dev/misskey/security/advisories/GHSA-m9xp-2fvm-pfmq\n\nCVE-2026-104816\nhttps://github.com/misskey-dev/misskey/security/advisories/GHSA-p73x-6qrq-34jc\n\nCVE-2026-104817 [\u2026]", "url": "https://bsky.app/profile/kakkokari-gtyih.misskey.io.ap.brid.gy/post/3mwx7adwdpml2"}, {"timestamp": "2026-10-13T18:39:30.169Z", "date_only": false, "value": "2026-10-13T18:39:30.169Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-104817", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T18:39:30.169Z", "date_only": false, "value": "2026-10-13T18:39:30.169Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2026-104817", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T18:58:47.961Z", "date_only": false, "value": "2026-10-13T18:58:47.961555Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117435133290805525", "record": "CVE-2026-104817", "field": "creation_timestamp", "uuid": "08709ba4-56f6-49e7-a358-b9fa0cf59a36", "content": "CVE-2026-104817 Misskey: Lack of rate limiting and size restrictions in RSS fetching API Misskey is an open source, federated social media platform. From 12.112.1 until 2026.7.0, the unauthenticated fetch-rss API lacks rate limiting and response-size restrictions and performs synchronous XML parsing. An attacker can trigger unbounded outbound HTTP requests and synchronous parsing, exhausting instance resources, amplifying requests toward third-party servers, or probing network-reachable services even when federation is disabled. This issue is fixed in version 2026.7.0.\nhttps://www.cve.org/CVERecord?id=CVE-2026-104817https://github.com/misskey-dev/misskey/security/advisories/GHSA-4x7v-qx8f-g3p8https://github.com/misskey-dev/misskey/commit/a12ee2e5d72c40252e11a164b2231667c9697667https://github.com/misskey-dev/misskey/releases/tag/2026.7.0#misskey-dev #misskey#CVE_2026_104817#bot", "url": "https://infosec.exchange/users/cve/statuses/117435133290805525"}, {"timestamp": "2026-10-13T19:03:52.462Z", "date_only": false, "value": "2026-10-13T19:03:52.462592Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-104817", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T19:03:52.462Z", "date_only": false, "value": "2026-10-13T19:03:52.462592Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-104817", "record": "FKIE_CVE-2026-104817", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T19:04:03.012Z", "date_only": false, "value": "2026-10-13T19:04:03.012Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-104817", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T19:04:03.012Z", "date_only": false, "value": "2026-10-13T19:04:03.012Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-104817", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T19:17:55.697Z", "date_only": false, "value": "2026-10-13T19:17:55.697", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-104817", "record": "FKIE_CVE-2026-104817", "field": "published"}, {"timestamp": "2026-10-13T19:17:55.697Z", "date_only": false, "value": "2026-10-13T19:17:55.697", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-104817", "record": "FKIE_CVE-2026-104817", "field": "lastModified"}]}