{"metadata": {"vulnerability": "CVE-2020-26302", "count": 22, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 16}}, "data": [{"timestamp": "2020-10-01T00:00:00Z", "date_only": false, "value": "2020-10-01T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-26302", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-12-22T00:00:00Z", "date_only": false, "value": "2022-12-22T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / GitHub_M", "record": "CVE-2020-26302", "field": "containers.cna.datePublic"}, {"timestamp": "2022-12-22T00:00:00Z", "date_only": false, "value": "2022-12-22T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2020-26302", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-12-22T21:04:00Z", "date_only": false, "value": "2022-12-22T21:04:00.000Z", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2020-26302", "record": "GSD-2020-26302", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2022-12-22T21:15:00Z", "date_only": false, "value": "2022-12-22T21:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PVRW-G6FX-MCX2", "record": "GHSA-PVRW-G6FX-MCX2", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-12-22T21:15:00Z", "date_only": false, "value": "2022-12-22T21:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-26302", "record": "GSD-2020-26302", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-12-22T21:15:08.877Z", "date_only": false, "value": "2022-12-22T21:15:08.877", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-26302", "record": "FKIE_CVE-2020-26302", "field": "published"}, {"timestamp": "2022-12-23T00:14:06Z", "date_only": false, "value": "2022-12-23T00:14:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/55201", "record": "CVE-2020-26302", "field": "creation_timestamp", "uuid": "fac7ce7f-91b1-4dad-803b-f750b2daac6e", "content": "\u203c CVE-2020-26302 \u203c\n\nis.js is a general-purpose check library. Versions 0.9.0 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). is.js uses a regex copy-pasted from a gist to validate URLs. Trying to validate a malicious string can cause the regex to loop \u00c3\u00a2\u00e2\u201a\u00ac\u00c5\u201cforever.\" This vulnerability was found using a CodeQL query which identifies inefficient regular expressions. is.js has no patch for this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/55201"}, {"timestamp": "2022-12-23T23:03:51.372Z", "date_only": false, "value": "2022-12-23T23:03:51.372Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-26302", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-12-30T21:20:00Z", "date_only": false, "value": "2022-12-30T21:20Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-26302", "record": "GSD-2020-26302", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-07-06T00:00:00Z", "date_only": true, "value": "2023-07-06", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2020-26302", "record": "GSD-2020-26302", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2023-07-06T00:00:00Z", "date_only": true, "value": "2023-07-06", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2020-26302", "record": "GSD-2020-26302", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2023-07-06T19:24:05Z", "date_only": false, "value": "2023-07-06T19:24:05Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PVRW-G6FX-MCX2", "record": "GHSA-PVRW-G6FX-MCX2", "field": "published"}, {"timestamp": "2023-07-06T21:46:34Z", "date_only": false, "value": "2023-07-06T21:46:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PVRW-G6FX-MCX2", "record": "GHSA-PVRW-G6FX-MCX2", "field": "modified"}, {"timestamp": "2023-12-13T01:22:09.075Z", "date_only": false, "value": "2023-12-13T01:22:09.075347Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-26302", "record": "GSD-2020-26302", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T15:56:04.334Z", "date_only": false, "value": "2024-08-04T15:56:04.334Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-26302", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-14T14:36:57.552Z", "date_only": false, "value": "2025-04-14T14:36:57.552001Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-26302", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-14T14:36:57.552Z", "date_only": false, "value": "2025-04-14T14:36:57.552001Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-26302", "record": "FKIE_CVE-2020-26302", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-14T14:37:16.925Z", "date_only": false, "value": "2025-04-14T14:37:16.925Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-26302", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-14T14:37:16.925Z", "date_only": false, "value": "2025-04-14T14:37:16.925Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-26302", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-14T14:53:52Z", "date_only": false, "value": "2025-04-14T14:53:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11625", "record": "CVE-2020-26302", "field": "creation_timestamp", "uuid": "d69408c5-37b7-40e1-8a37-8b7ca3032928", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2020-26302\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: is.js is a general-purpose check library. Versions 0.9.0 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). is.js uses a regex copy-pasted from a gist to validate URLs. Trying to validate a malicious string can cause the regex to loop \u201cforever.\" This vulnerability was found using a CodeQL query which identifies inefficient regular expressions. is.js has no patch for this issue.\n\ud83d\udccf Published: 2022-12-23T23:03:51.372Z\n\ud83d\udccf Modified: 2025-04-14T14:37:16.925Z\n\ud83d\udd17 References:\n1. https://securitylab.github.com/advisories/GHSL-2020-295-redos-is.js\n2. https://github.com/arasatasaygin/is.js/issues/320", "url": "https://t.me/DarkWebInformer_CVEAlerts/11625"}, {"timestamp": "2026-06-17T03:08:02.120Z", "date_only": false, "value": "2026-06-17T03:08:02.120", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-26302", "record": "FKIE_CVE-2020-26302", "field": "lastModified"}]}