{"metadata": {"vulnerability": "GHSA-r4q5-vmmm-2653", "count": 55, "kinds": {"milestone": 16, "sighting": 6, "kev": 0, "other": 33}}, "data": [{"timestamp": "2026-04-14T01:11:11Z", "date_only": false, "value": "2026-04-14T01:11:11Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-r4q5-vmmm-2653", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-14T12:01:09.234Z", "date_only": false, "value": "2026-04-14T12:01:09.234485Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mjhdhgn23o2t", "record": "GHSA-r4q5-vmmm-2653", "field": "creation_timestamp", "uuid": "1b4dad4f-8cdf-4efc-8010-f9bd641f1862", "url": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mjhdhgn23o2t"}, {"timestamp": "2026-04-15T16:37:22.766Z", "date_only": false, "value": "2026-04-15T16:37:22.766Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2026-40895", "record": "CVE-2026-40895", "field": "cveMetadata.dateReserved", "linked_record": true}, {"timestamp": "2026-04-20T01:05:19Z", "date_only": false, "value": "2026-04-20T01:05:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/konard/dc529ad3e07305daab99c78bc17d7ea6", "record": "GHSA-r4q5-vmmm-2653", "field": "creation_timestamp", "uuid": "01225d2d-e71a-4866-b89d-2eb69bf2d9a8", "url": "https://gist.github.com/konard/dc529ad3e07305daab99c78bc17d7ea6"}, {"timestamp": "2026-04-21T19:59:59.759Z", "date_only": false, "value": "2026-04-21T19:59:59.759Z", "kind": "other", "label": "Made public", "source": "cvelistv5 \u00b7 CVE-2026-40895 / redhat-SADP", "record": "CVE-2026-40895", "field": "containers.adp.1.datePublic", "linked_record": true}, {"timestamp": "2026-04-21T19:59:59.759Z", "date_only": false, "value": "2026-04-21T19:59:59.759Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2026-40895", "record": "CVE-2026-40895", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2026-04-21T19:59:59.759Z", "date_only": false, "value": "2026-04-21T19:59:59.759Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 \u00b7 CVE-2026-40895 / redhat-SADP", "record": "CVE-2026-40895", "field": "containers.adp.1.timeline.1.time", "text": "Made public.", "linked_record": true}, {"timestamp": "2026-04-21T21:02:33.280Z", "date_only": false, "value": "2026-04-21T21:02:33.280Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 \u00b7 CVE-2026-40895 / redhat-SADP", "record": "CVE-2026-40895", "field": "containers.adp.1.timeline.0.time", "text": "Reported to Red Hat.", "linked_record": true}, {"timestamp": "2026-04-21T21:16:44Z", "date_only": false, "value": "2026-04-21T21:16:44Z", "kind": "other", "label": "Nvd published at", "source": "github", "record": "GHSA-r4q5-vmmm-2653", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-04-22T13:31:13.035Z", "date_only": false, "value": "2026-04-22T13:31:13.035788Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2026-40895 / CISA-ADP", "record": "CVE-2026-40895", "field": "containers.adp.0.metrics.0.other.content.timestamp", "linked_record": true}, {"timestamp": "2026-04-22T13:31:34.652Z", "date_only": false, "value": "2026-04-22T13:31:34.652Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2026-40895 / CISA-ADP", "record": "CVE-2026-40895", "field": "containers.adp.0.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-04-24T12:00:56.164Z", "date_only": false, "value": "2026-04-24T12:00:56.164783Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mkai47r4zd26", "record": "GHSA-r4q5-vmmm-2653", "field": "creation_timestamp", "uuid": "c7d37d69-feb5-488a-9ceb-55be31a9bea6", "url": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mkai47r4zd26"}, {"timestamp": "2026-04-27T21:04:47Z", "date_only": false, "value": "2026-04-27T21:04:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/konard/b4fdbcec737f21f5f1a690e8c86a6713", "record": "GHSA-r4q5-vmmm-2653", "field": "creation_timestamp", "uuid": "a0a23851-f41e-4c84-90e5-9fe86a86b635", "url": "https://gist.github.com/konard/b4fdbcec737f21f5f1a690e8c86a6713"}, {"timestamp": "2026-04-27T22:32:44Z", "date_only": false, "value": "2026-04-27T22:32:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/konard/a382119a83c3810614e002634a056ade", "record": "GHSA-r4q5-vmmm-2653", "field": "creation_timestamp", "uuid": "22626d0b-add5-4766-bfed-9d45c84e81ad", "url": "https://gist.github.com/konard/a382119a83c3810614e002634a056ade"}, {"timestamp": "2026-05-13T14:10:22Z", "date_only": false, "value": "2026-05-13T14:10:22Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-DT52903", "record": "CLEANSTART-2026-DT52903", "field": "modified", "linked_record": true}, {"timestamp": "2026-05-18T13:18:14.800Z", "date_only": false, "value": "2026-05-18T13:18:14.800358Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-LC05413", "record": "CLEANSTART-2026-LC05413", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-18T13:36:50.922Z", "date_only": false, "value": "2026-05-18T13:36:50.922233Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-BE61221", "record": "CLEANSTART-2026-BE61221", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-18T13:40:13.239Z", "date_only": false, "value": "2026-05-18T13:40:13.239792Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-XR95601", "record": "CLEANSTART-2026-XR95601", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-18T13:48:08.433Z", "date_only": false, "value": "2026-05-18T13:48:08.433806Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-OZ77074", "record": "CLEANSTART-2026-OZ77074", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-18T14:01:35.385Z", "date_only": false, "value": "2026-05-18T14:01:35.385818Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-CB77162", "record": "CLEANSTART-2026-CB77162", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-21T08:09:24.246Z", "date_only": false, "value": "2026-05-21T08:09:24.246960Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-ML12367", "record": "CLEANSTART-2026-ML12367", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-30T07:10:53Z", "date_only": false, "value": "2026-07-30T07:10:53Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-BC28327", "record": "CLEANSTART-2026-BC28327", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-30T07:10:53Z", "date_only": false, "value": "2026-07-30T07:10:53Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-JS77215", "record": "CLEANSTART-2026-JS77215", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-30T07:10:53Z", "date_only": false, "value": "2026-07-30T07:10:53Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-JY49884", "record": "CLEANSTART-2026-JY49884", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-30T07:10:53Z", "date_only": false, "value": "2026-07-30T07:10:53Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-QN62418", "record": "CLEANSTART-2026-QN62418", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-JY49884", "record": "CLEANSTART-2026-JY49884", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-JY49884", "record": "CLEANSTART-2026-JY49884", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-10T12:05:07.783Z", "date_only": false, "value": "2026-09-10T12:05:07.783Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2026-40895 / redhat-SADP", "record": "CVE-2026-40895", "field": "containers.adp.1.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-09-18T10:20:52.973Z", "date_only": false, "value": "2026-09-18T10:20:52.973069Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-NO27854", "record": "CLEANSTART-2026-NO27854", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-BC28327", "record": "CLEANSTART-2026-BC28327", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-BE61221", "record": "CLEANSTART-2026-BE61221", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-CB77162", "record": "CLEANSTART-2026-CB77162", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-JS77215", "record": "CLEANSTART-2026-JS77215", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-LC05413", "record": "CLEANSTART-2026-LC05413", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-ML12367", "record": "CLEANSTART-2026-ML12367", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-OZ77074", "record": "CLEANSTART-2026-OZ77074", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-QN62418", "record": "CLEANSTART-2026-QN62418", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-XR95601", "record": "CLEANSTART-2026-XR95601", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-BC28327", "record": "CLEANSTART-2026-BC28327", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-BE61221", "record": "CLEANSTART-2026-BE61221", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-CB77162", "record": "CLEANSTART-2026-CB77162", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-JS77215", "record": "CLEANSTART-2026-JS77215", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-LC05413", "record": "CLEANSTART-2026-LC05413", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-ML12367", "record": "CLEANSTART-2026-ML12367", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-OZ77074", "record": "CLEANSTART-2026-OZ77074", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-QN62418", "record": "CLEANSTART-2026-QN62418", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-XR95601", "record": "CLEANSTART-2026-XR95601", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-10-15T12:00:00Z", "date_only": false, "value": "2026-10-15T12:00:00Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-NO27854", "record": "CLEANSTART-2026-NO27854", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-19T13:21:27Z", "date_only": false, "value": "2026-10-19T13:21:27Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-KZ60463", "record": "CLEANSTART-2026-KZ60463", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-20T18:04:25.486Z", "date_only": false, "value": "2026-10-20T18:04:25.486657Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117474555647633481", "record": "GHSA-r4q5-vmmm-2653", "field": "creation_timestamp", "uuid": "b2a6507c-98f2-46a7-8893-40842f817963", "url": "https://infosec.exchange/users/cve/statuses/117474555647633481"}, {"timestamp": "2026-10-30T10:01:42.059Z", "date_only": false, "value": "2026-10-30T10:01:42.059517Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-KZ60463", "record": "CLEANSTART-2026-KZ60463", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T17:58:34.032Z", "date_only": false, "value": "2026-10-30T17:58:34.032387Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-DT52903", "record": "CLEANSTART-2026-DT52903", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-02T23:19:20Z", "date_only": false, "value": "2026-11-02T23:19:20Z", "kind": "other", "label": "Updated", "source": "github", "record": "GHSA-r4q5-vmmm-2653", "field": "modified"}, {"timestamp": "2026-11-02T23:19:34.015Z", "date_only": false, "value": "2026-11-02T23:19:34.015Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2026-40895", "record": "CVE-2026-40895", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-11-02T23:19:34.015Z", "date_only": false, "value": "2026-11-02T23:19:34.015Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2026-40895 / GitHub_M", "record": "CVE-2026-40895", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}], "metrics": {"as_of": "2026-11-15T14:45:43.810Z", "anchors": {"origin": {"timestamp": "2026-04-14T01:11:11Z", "date_only": false, "value": "2026-04-14T01:11:11Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-r4q5-vmmm-2653", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-04-14T01:11:11Z", "date_only": false, "value": "2026-04-14T01:11:11Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-r4q5-vmmm-2653", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 18624872.810547, "hours": 5173.575780707501, "days": 215.56565752947918, "min_seconds": 18624872.810547, "max_seconds": 18624872.810547, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-14T01:11:11Z", "date_only": false, "value": "2026-04-14T01:11:11Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-r4q5-vmmm-2653", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T14:45:43.810Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}