{"metadata": {"vulnerability": "cve-2026-93838", "count": 22, "kinds": {"milestone": 5, "sighting": 3, "kev": 0, "other": 14}}, "data": [{"timestamp": "2026-09-16T00:00:00Z", "date_only": false, "value": "2026-09-16T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-93838", "field": "containers.cna.datePublic"}, {"timestamp": "2026-09-18T18:16:36.587Z", "date_only": false, "value": "2026-09-18T18:16:36.587Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-93838", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-18T19:06:03.899Z", "date_only": false, "value": "2026-09-18T19:06:03.899Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-93838", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-18T20:09:38.130Z", "date_only": false, "value": "2026-09-18T20:09:38.130553Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-93838", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-18T20:09:38.130Z", "date_only": false, "value": "2026-09-18T20:09:38.130553Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-93838", "record": "FKIE_CVE-2026-93838", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-18T20:09:44.508Z", "date_only": false, "value": "2026-09-18T20:09:44.508Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-93838", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-18T20:17:33Z", "date_only": false, "value": "2026-09-18T20:17:33Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2WCG-J54R-M6WM", "record": "GHSA-2WCG-J54R-M6WM", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-18T20:17:33.900Z", "date_only": false, "value": "2026-09-18T20:17:33.900", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-93838", "record": "FKIE_CVE-2026-93838", "field": "published"}, {"timestamp": "2026-09-18T21:32:27Z", "date_only": false, "value": "2026-09-18T21:32:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2WCG-J54R-M6WM", "record": "GHSA-2WCG-J54R-M6WM", "field": "published"}, {"timestamp": "2026-09-18T21:32:27Z", "date_only": false, "value": "2026-09-18T21:32:27Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2WCG-J54R-M6WM", "record": "GHSA-2WCG-J54R-M6WM", "field": "modified"}, {"timestamp": "2026-09-18T21:58:31.764Z", "date_only": false, "value": "2026-09-18T21:58:31.764126Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jq6tzozumw6ui", "record": "CVE-2026-93838", "field": "creation_timestamp", "uuid": "f292c2d2-9927-4958-a443-6e3a4e631d56", "content": "CVE-2026-93838 - SGLang through 0.5.20 Unbounded Memory Allocation via STAGING_REQ chunk_idx\nCVE ID : CVE-2026-93838\n \n Published : Sept. 18, 2026, 8:17 p.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : SGLang versions through 0.5.20 contain an unbounded memory allocation vulnerab...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/jq6tzozumw6ui"}, {"timestamp": "2026-09-22T20:43:58.793Z", "date_only": false, "value": "2026-09-22T20:43:58.793", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-93838", "record": "FKIE_CVE-2026-93838", "field": "lastModified"}, {"timestamp": "2026-09-23T00:00:00Z", "date_only": false, "value": "2026-09-23T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11865-1", "record": "OPENSUSE-SU-2026:11865-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-23T00:00:00Z", "date_only": false, "value": "2026-09-23T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11865-1", "record": "OPENSUSE-SU-2026:11865-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-09-23T00:00:00Z", "date_only": false, "value": "2026-09-23T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11865-1", "record": "OPENSUSE-SU-2026:11865-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-23T00:00:00Z", "date_only": false, "value": "2026-09-23T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11865-1", "record": "OPENSUSE-SU-2026:11865-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-09-24T10:29:31Z", "date_only": false, "value": "2026-09-24T10:29:31Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11865-1", "record": "OPENSUSE-SU-2026:11865-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-24T10:29:31Z", "date_only": false, "value": "2026-09-24T10:29:31Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11865-1", "record": "OPENSUSE-SU-2026:11865-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-24T14:23:13.073Z", "date_only": false, "value": "2026-09-24T14:23:13.073Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-93838", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-24T14:23:13.073Z", "date_only": false, "value": "2026-09-24T14:23:13.073Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-93838", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-27T21:50:02.886Z", "date_only": false, "value": "2026-09-27T21:50:02.886210Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/hugovalters/statuses/117345209687701834", "record": "CVE-2026-93838", "field": "creation_timestamp", "uuid": "1f72296e-4e22-4e57-8a14-f8a9e028ba9e", "content": "CVE-2026-93838: SGLang through 0.5.20, unbounded memory alloc in handle_staging_req() via chunk_idx. ZMQ access leads to OOM crash. CVSS 5.9, unpatched. Patch now: https://www.valtersit.com/cve/CVE-2026-93838/ #CVE #infosec #SGLang", "url": "https://mastodon.social/users/hugovalters/statuses/117345209687701834"}, {"timestamp": "2026-09-27T22:00:05.982Z", "date_only": false, "value": "2026-09-27T22:00:05.982160Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwjsdai7fo2y", "record": "CVE-2026-93838", "field": "creation_timestamp", "uuid": "6384f811-5b7e-48c4-b088-76def9c8c346", "content": "CVE-2026-93838: SGLang through 0.5.20, unbounded memory alloc in handle_staging_req() via chunk_idx. ZMQ access leads to OOM crash. CVSS 5.9, unpatched. Patch now: https://www.valtersit.com/cve/CVE-2026-93838/ #CVE #infosec #SGLang", "url": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwjsdai7fo2y"}]}