{"metadata": {"vulnerability": "CVE-2021-41146", "count": 25, "kinds": {"milestone": 5, "sighting": 6, "kev": 0, "other": 14}}, "data": [{"timestamp": "2021-09-15T00:00:00Z", "date_only": false, "value": "2021-09-15T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-41146", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-10-21T00:00:00Z", "date_only": true, "value": "2021-10-21", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2021-41146", "record": "GSD-2021-41146", "field": "namespaces.gitlab.com.advisories.0.pubdate", "linked_record": true}, {"timestamp": "2021-10-21T17:35:10Z", "date_only": false, "value": "2021-10-21T17:35:10.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-41146", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-10-21T17:35:10Z", "date_only": false, "value": "2021-10-21T17:35:10.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2021-41146", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-10-21T18:15:00Z", "date_only": false, "value": "2021-10-21T18:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VW27-FWJF-5QXM", "record": "GHSA-VW27-FWJF-5QXM", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2021-10-21T18:15:00Z", "date_only": false, "value": "2021-10-21T18:15:00Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2021-382", "record": "PYSEC-2021-382", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2021-10-21T18:15:00Z", "date_only": false, "value": "2021-10-21T18:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-41146", "record": "GSD-2021-41146", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2021-10-21T18:15:10.303Z", "date_only": false, "value": "2021-10-21T18:15:10.303", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-41146", "record": "FKIE_CVE-2021-41146", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2021-10-21T22:37:06Z", "date_only": false, "value": "2021-10-21T22:37:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/30972", "record": "CVE-2021-41146", "field": "creation_timestamp", "uuid": "446c8a52-9b0d-4eb3-b09e-d398e60b85c1", "content": "\u203c CVE-2021-41146 \u203c\n\nqutebrowser is an open source keyboard-focused browser with a minimal GUI. Starting with qutebrowser v1.7.0, the Windows installer for qutebrowser registers a `qutebrowserurl:` URL handler. With certain applications, opening a specially crafted `qutebrowserurl:...` URL can lead to execution of qutebrowser commands, which in turn allows arbitrary code execution via commands such as `:spawn` or `:debug-pyeval`. Only Windows installs where qutebrowser is registered as URL handler are affected. The issue has been fixed in qutebrowser v2.4.0. The fix also adds additional hardening for potential similar issues on Linux (by adding the new --untrusted-args flag to the .desktop file), though no such vulnerabilities are known.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/30972"}, {"timestamp": "2021-10-22T16:20:10Z", "date_only": false, "value": "2021-10-22T16:20:10Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VW27-FWJF-5QXM", "record": "GHSA-VW27-FWJF-5QXM", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2021-10-25T00:00:00Z", "date_only": true, "value": "2021-10-25", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-100609", "record": "CNVD-2021-100609", "field": "submitTime", "linked_record": true}, {"timestamp": "2021-10-28T05:27:07.120Z", "date_only": false, "value": "2021-10-28T05:27:07.120992Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2021-382", "record": "PYSEC-2021-382", "field": "modified", "linked_record": true}, {"timestamp": "2021-12-17T00:00:00Z", "date_only": true, "value": "2021-12-17", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-100609", "record": "CNVD-2021-100609", "field": "openTime", "linked_record": true}, {"timestamp": "2022-10-24T00:00:00Z", "date_only": true, "value": "2022-10-24", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2021-41146", "record": "GSD-2021-41146", "field": "namespaces.gitlab.com.advisories.0.date", "linked_record": true}, {"timestamp": "2022-10-24T18:43:00Z", "date_only": false, "value": "2022-10-24T18:43Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-41146", "record": "GSD-2021-41146", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-12-13T01:23:27.237Z", "date_only": false, "value": "2023-12-13T01:23:27.237702Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-41146", "record": "GSD-2021-41146", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-08-04T02:59:31.423Z", "date_only": false, "value": "2024-08-04T02:59:31.423Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-41146", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T02:59:31.423Z", "date_only": false, "value": "2024-08-04T02:59:31.423Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-41146", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-16T20:48:13Z", "date_only": false, "value": "2024-10-16T20:48:13Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VW27-FWJF-5QXM", "record": "GHSA-VW27-FWJF-5QXM", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-17T04:07:58.013Z", "date_only": false, "value": "2026-06-17T04:07:58.013", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-41146", "record": "FKIE_CVE-2021-41146", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-30T16:49:56.513Z", "date_only": false, "value": "2026-07-30T16:49:56.513380Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/tu-trinh-scale/6952882fc494bc673397ec58f04a6e92", "record": "CVE-2021-41146", "field": "creation_timestamp", "uuid": "9a0bcb38-9904-4133-9fe5-999feb4683b9", "url": "https://gist.github.com/tu-trinh-scale/6952882fc494bc673397ec58f04a6e92"}, {"timestamp": "2026-07-30T19:33:43.739Z", "date_only": false, "value": "2026-07-30T19:33:43.739653Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/tu-trinh-scale/cdec105f804c8b4962d64774b7f2237d", "record": "CVE-2021-41146", "field": "creation_timestamp", "uuid": "e6fc9cdb-a363-46c4-9cb1-6d30723c1806", "url": "https://gist.github.com/tu-trinh-scale/cdec105f804c8b4962d64774b7f2237d"}, {"timestamp": "2026-07-30T19:33:55.834Z", "date_only": false, "value": "2026-07-30T19:33:55.834235Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/tu-trinh-scale/78b43101caf0a2889d878bc26f12532e", "record": "CVE-2021-41146", "field": "creation_timestamp", "uuid": "4f37a3da-8c90-4790-b036-e5225ef7c6a0", "url": "https://gist.github.com/tu-trinh-scale/78b43101caf0a2889d878bc26f12532e"}, {"timestamp": "2026-07-30T20:36:32.247Z", "date_only": false, "value": "2026-07-30T20:36:32.247683Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/tu-trinh-scale/59ec800c6d4eb5caeefdfca2353b2e8a", "record": "CVE-2021-41146", "field": "creation_timestamp", "uuid": "ea18cd7c-e477-4bb0-9ae0-da9c37c84710", "url": "https://gist.github.com/tu-trinh-scale/59ec800c6d4eb5caeefdfca2353b2e8a"}, {"timestamp": "2026-07-30T20:36:46.075Z", "date_only": false, "value": "2026-07-30T20:36:46.075127Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/tu-trinh-scale/04002ae027b5b8d8be96f4e475729951", "record": "CVE-2021-41146", "field": "creation_timestamp", "uuid": "5a0e8ad7-f4ad-4a74-9288-9f3a2939ac92", "url": "https://gist.github.com/tu-trinh-scale/04002ae027b5b8d8be96f4e475729951"}], "metrics": {"as_of": "2026-11-08T10:44:08.127Z", "anchors": {"origin": {"timestamp": "2021-10-21T17:35:10Z", "date_only": false, "value": "2021-10-21T17:35:10.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-41146", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2021-10-21T17:35:10Z", "date_only": false, "value": "2021-10-21T17:35:10.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-41146", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 159296938.127384, "hours": 44249.14947982889, "days": 1843.7145616595371, "min_seconds": 159296938.127384, "max_seconds": 159296938.127384, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-10-21T17:35:10Z", "date_only": false, "value": "2021-10-21T17:35:10.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-41146", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-08T10:44:08.127Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}