{"metadata": {"vulnerability": "cve-2026-5220", "count": 17, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-03-31T11:56:09.964Z", "date_only": false, "value": "2026-03-31T11:56:09.964Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-5220", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-01T14:08:00Z", "date_only": false, "value": "2026-07-01T14:08:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / TR-CERT", "record": "cve-2026-5220", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-01T14:12:54.765Z", "date_only": false, "value": "2026-07-01T14:12:54.765Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-5220", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-01T14:12:54.765Z", "date_only": false, "value": "2026-07-01T14:12:54.765Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / TR-CERT", "record": "cve-2026-5220", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-01T14:55:00.239Z", "date_only": false, "value": "2026-07-01T14:55:00.239657Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-5220", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-01T14:55:00.239Z", "date_only": false, "value": "2026-07-01T14:55:00.239657Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-5220", "record": "FKIE_CVE-2026-5220", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-01T14:55:07.615Z", "date_only": false, "value": "2026-07-01T14:55:07.615Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-5220", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-01T14:55:07.615Z", "date_only": false, "value": "2026-07-01T14:55:07.615Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-5220", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-01T15:17:12Z", "date_only": false, "value": "2026-07-01T15:17:12Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RR2X-7R28-45FW", "record": "GHSA-RR2X-7R28-45FW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-07-01T15:17:12.090Z", "date_only": false, "value": "2026-07-01T15:17:12.090", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-5220", "record": "FKIE_CVE-2026-5220", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-01T15:35:20Z", "date_only": false, "value": "2026-07-01T15:35:20Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RR2X-7R28-45FW", "record": "GHSA-RR2X-7R28-45FW", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-01T15:35:20Z", "date_only": false, "value": "2026-07-01T15:35:20Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RR2X-7R28-45FW", "record": "GHSA-RR2X-7R28-45FW", "field": "modified"}, {"timestamp": "2026-07-02T00:32:46.956Z", "date_only": false, "value": "2026-07-02T00:32:46.956649Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmrtb3oiy2d", "record": "CVE-2026-5220", "field": "creation_timestamp", "uuid": "52703335-84fc-4cc5-a2b7-3ff2d1149605", "content": "CVE-2026-5220: \u0423\u0433\u0440\u043e\u0437\u0430 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/7CD0E2E4-648D-4CB6-A2EB-1DD1FEC3193D", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmrtb3oiy2d"}, {"timestamp": "2026-07-02T01:18:57.476Z", "date_only": false, "value": "2026-07-02T01:18:57.476063Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmuft6pvk2u", "record": "CVE-2026-5220", "field": "creation_timestamp", "uuid": "10e43e36-4de3-42c1-9136-23767179c366", "content": "CVE-2026-5220: \u0423\u0433\u0440\u043e\u0437\u0430 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/0F86CD22-E693-49CE-9C0B-F6F764D72DE3", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmuft6pvk2u"}, {"timestamp": "2026-07-02T01:19:00.451Z", "date_only": false, "value": "2026-07-02T01:19:00.451443Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mpmufw47l623", "record": "CVE-2026-5220", "field": "creation_timestamp", "uuid": "94724125-afbe-4610-a678-926597e6229c", "content": "CVE-2026-5220 \u6f0f\u6d1e\u89e3\u6790:Web\u9875\u9762\u751f\u6210\u4e2d\u7684\u8f93\u5165\u4e2d\u548c\u4e0d\u8db3\u4e0eXSS\u653b\u51fb\u9632\u62a4\u6307\u5357\n\n\n\nhttps://qian.cx/posts/BDCF497E-314E-4C4C-B0FF-8C3A5BA7D862", "url": "https://bsky.app/profile/qiancx.bsky.social/post/3mpmufw47l623"}, {"timestamp": "2026-07-02T01:54:49.638Z", "date_only": false, "value": "2026-07-02T01:54:49.638505Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmwfxkpfq2i", "record": "CVE-2026-5220", "field": "creation_timestamp", "uuid": "b391610f-239c-4c04-ac9c-9acca206d80b", "content": "CVE-2026-5220: \u0423\u0433\u0440\u043e\u0437\u0430 XSS-\u0430\u0442\u0430\u043a\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/98C93B89-5CE1-4BDD-BB4F-846761D56C8C", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmwfxkpfq2i"}, {"timestamp": "2026-10-25T17:10:00.197Z", "date_only": false, "value": "2026-10-25T17:10:00.197", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-5220", "record": "FKIE_CVE-2026-5220", "field": "lastModified"}], "metrics": {"as_of": "2026-11-01T00:40:57.804Z", "anchors": {"origin": {"timestamp": "2026-07-01T14:08:00Z", "date_only": false, "value": "2026-07-01T14:08:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / TR-CERT", "record": "cve-2026-5220", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-07-01T14:08:00Z", "date_only": false, "value": "2026-07-01T14:08:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / TR-CERT", "record": "cve-2026-5220", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 10578777.804534, "hours": 2938.5493901483333, "days": 122.43955792284721, "min_seconds": 10578777.804534, "max_seconds": 10578777.804534, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-01T14:08:00Z", "date_only": false, "value": "2026-07-01T14:08:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / TR-CERT", "record": "cve-2026-5220", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-01T00:40:57.804Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}