{"metadata": {"vulnerability": "CVE-2021-41097", "count": 20, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 13}}, "data": [{"timestamp": "2021-09-15T00:00:00Z", "date_only": false, "value": "2021-09-15T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-41097", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-09-27T00:00:00Z", "date_only": true, "value": "2021-09-27", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2021-41097", "record": "GSD-2021-41097", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2021-09-27T17:40:12Z", "date_only": false, "value": "2021-09-27T17:40:12.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-41097", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-09-27T17:40:12Z", "date_only": false, "value": "2021-09-27T17:40:12.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2021-41097", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-09-27T18:15:00Z", "date_only": false, "value": "2021-09-27T18:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3C9C-2P65-QVWV", "record": "GHSA-3C9C-2P65-QVWV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-09-27T18:15:00Z", "date_only": false, "value": "2021-09-27T18:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-41097", "record": "GSD-2021-41097", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-09-27T18:15:08.443Z", "date_only": false, "value": "2021-09-27T18:15:08.443", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-41097", "record": "FKIE_CVE-2021-41097", "field": "published"}, {"timestamp": "2021-09-27T20:12:16Z", "date_only": false, "value": "2021-09-27T20:12:16Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3C9C-2P65-QVWV", "record": "GHSA-3C9C-2P65-QVWV", "field": "published"}, {"timestamp": "2021-09-27T22:34:53Z", "date_only": false, "value": "2021-09-27T22:34:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/29519", "record": "CVE-2021-41097", "field": "creation_timestamp", "uuid": "f7c80278-c99e-4cb4-916e-7f3aa5841513", "content": "\u203c CVE-2021-41097 \u203c\n\naurelia-path is part of the Aurelia platform and contains utilities for path manipulation. There is a prototype pollution vulnerability in aurelia-path before version 1.1.7. The vulnerability exposes Aurelia application that uses `aurelia-path` package to parse a string. The majority of this will be Aurelia applications that employ the `aurelia-router` package. An example is this could allow an attacker to change the prototype of base object class `Object` by tricking an application to parse the following URL: `https://aurelia.io/blog/?__proto__[asdf]=asdf`. The problem is patched in version `1.1.7`.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/29519"}, {"timestamp": "2021-09-29T00:00:00Z", "date_only": true, "value": "2021-09-29", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-20532", "record": "CNVD-2022-20532", "field": "submitTime"}, {"timestamp": "2022-03-17T00:00:00Z", "date_only": true, "value": "2022-03-17", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-20532", "record": "CNVD-2022-20532", "field": "openTime"}, {"timestamp": "2022-05-26T19:50:24Z", "date_only": false, "value": "2022-05-26T19:50:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3C9C-2P65-QVWV", "record": "GHSA-3C9C-2P65-QVWV", "field": "modified"}, {"timestamp": "2022-09-30T00:00:00Z", "date_only": true, "value": "2022-09-30", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2021-41097", "record": "GSD-2021-41097", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2022-09-30T02:31:00Z", "date_only": false, "value": "2022-09-30T02:31Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-41097", "record": "GSD-2021-41097", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:23:26.920Z", "date_only": false, "value": "2023-12-13T01:23:26.920618Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-41097", "record": "GSD-2021-41097", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T02:59:31.515Z", "date_only": false, "value": "2024-08-04T02:59:31.515Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-41097", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T02:59:31.515Z", "date_only": false, "value": "2024-08-04T02:59:31.515Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-41097", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-01-28T03:48:04Z", "date_only": false, "value": "2026-01-28T03:48:04.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-41097.yaml", "record": "CVE-2021-41097", "field": "creation_timestamp", "uuid": "a124ef69-b518-4676-94c5-a108f59b4acd", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-41097.yaml"}, {"timestamp": "2026-01-29T21:02:28.576Z", "date_only": false, "value": "2026-01-29T21:02:28.576270Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mdloqbcdou24", "record": "CVE-2021-41097", "field": "creation_timestamp", "uuid": "51963f3f-a325-4364-8edf-92a726a609d0", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mdloqbcdou24"}, {"timestamp": "2026-06-17T04:07:52.177Z", "date_only": false, "value": "2026-06-17T04:07:52.177", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-41097", "record": "FKIE_CVE-2021-41097", "field": "lastModified"}]}