{"metadata": {"vulnerability": "GHSA-v4pr-fm98-w9pg", "count": 19, "kinds": {"milestone": 3, "sighting": 10, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-01-05T16:44:16.367Z", "date_only": false, "value": "2026-01-05T16:44:16.367Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2026-21858", "record": "CVE-2026-21858", "field": "cveMetadata.dateReserved", "linked_record": true}, {"timestamp": "2026-01-07T16:00:07.341Z", "date_only": false, "value": "2026-01-07T16:00:07.341514Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/115854646088897217", "record": "GHSA-v4pr-fm98-w9pg", "field": "creation_timestamp", "uuid": "072cd0d6-84a7-483d-87bb-6e694ef6e185", "url": "https://infosec.exchange/users/cR0w/statuses/115854646088897217"}, {"timestamp": "2026-01-07T19:20:19Z", "date_only": false, "value": "2026-01-07T19:20:19Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-v4pr-fm98-w9pg", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-01-07T23:57:52.079Z", "date_only": false, "value": "2026-01-07T23:57:52.079Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2026-21858", "record": "CVE-2026-21858", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2026-01-08T00:15:59Z", "date_only": false, "value": "2026-01-08T00:15:59Z", "kind": "other", "label": "Nvd published at", "source": "github", "record": "GHSA-v4pr-fm98-w9pg", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-01-08T01:03:43Z", "date_only": false, "value": "2026-01-08T01:03:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/2ek7eyEQkPBVm_oE9OK31_C8c0inA6djA7KhdWeXyx-F_04", "record": "GHSA-V4PR-FM98-W9PG", "field": "creation_timestamp", "uuid": "59b683ee-35a1-45a9-aeed-efad8043b0e3", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-01-08T11:11:24.384Z", "date_only": false, "value": "2026-01-08T11:11:24.384786Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sublimer.mstdn.sublimer.me.ap.brid.gy/post/3mbvtjl5eqwn2", "record": "GHSA-v4pr-fm98-w9pg", "field": "creation_timestamp", "uuid": "ce529219-39b5-46c7-8903-eb6185291539", "url": "https://bsky.app/profile/sublimer.mstdn.sublimer.me.ap.brid.gy/post/3mbvtjl5eqwn2"}, {"timestamp": "2026-01-08T19:09:29.699Z", "date_only": false, "value": "2026-01-08T19:09:29.699244Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2026-21858 / CISA-ADP", "record": "CVE-2026-21858", "field": "containers.adp.0.metrics.0.other.content.timestamp", "linked_record": true}, {"timestamp": "2026-01-08T19:09:36.015Z", "date_only": false, "value": "2026-01-08T19:09:36.015Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2026-21858 / CISA-ADP", "record": "CVE-2026-21858", "field": "containers.adp.0.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-01-10T20:15:45.976Z", "date_only": false, "value": "2026-01-10T20:15:45.976555Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/shadowserver/statuses/115872638092112061", "record": "GHSA-v4pr-fm98-w9pg", "field": "creation_timestamp", "uuid": "207de7dd-f9e4-499b-b395-f7f6bebc2113", "url": "https://infosec.exchange/users/shadowserver/statuses/115872638092112061"}, {"timestamp": "2026-01-12T17:45:54Z", "date_only": false, "value": "2026-01-12T17:45:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-001-vulnerabilities-affecting-n8n-cve-2026-21858-cve-2026-21877-cve-2025-68613", "record": "GHSA-v4pr-fm98-w9pg", "field": "creation_timestamp", "uuid": "64646c14-ce28-45d9-a7ff-1b7d47e44511", "url": "https://cyber.gc.ca/en/alerts-advisories/al26-001-vulnerabilities-affecting-n8n-cve-2026-21858-cve-2026-21877-cve-2025-68613"}, {"timestamp": "2026-01-12T18:37:27.893Z", "date_only": false, "value": "2026-01-12T18:37:27.893Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2026-21858", "record": "CVE-2026-21858", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-01-12T18:37:27.893Z", "date_only": false, "value": "2026-01-12T18:37:27.893Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2026-21858 / GitHub_M", "record": "CVE-2026-21858", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-01-13T15:04:59Z", "date_only": false, "value": "2026-01-13T15:04:59Z", "kind": "other", "label": "Updated", "source": "github", "record": "GHSA-v4pr-fm98-w9pg", "field": "modified"}, {"timestamp": "2026-01-24T21:26:51Z", "date_only": false, "value": "2026-01-24T21:26:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/be4d1283d126d357f07086861c16a4af", "record": "GHSA-v4pr-fm98-w9pg", "field": "creation_timestamp", "uuid": "0f8ca623-d8bb-4ff8-bf32-7e9b19e057fc", "url": "https://gist.github.com/alon710/be4d1283d126d357f07086861c16a4af"}, {"timestamp": "2026-01-24T22:42:14Z", "date_only": false, "value": "2026-01-24T22:42:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/d3d72612ebf7ed7732f8f8e5e9f150de", "record": "GHSA-v4pr-fm98-w9pg", "field": "creation_timestamp", "uuid": "4103b747-284e-41c8-a8ad-bd2f4a1e9578", "url": "https://gist.github.com/alon710/d3d72612ebf7ed7732f8f8e5e9f150de"}, {"timestamp": "2026-08-04T13:00:19.709Z", "date_only": false, "value": "2026-08-04T13:00:19.709005Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberok_news/173", "record": "GHSA-V4PR-FM98-W9PG", "field": "creation_timestamp", "uuid": "2fffe594-a14e-4c9a-9909-aa3521742e30", "url": "https://t.me/cyberok_news/173"}, {"timestamp": "2026-08-05T00:00:36.484Z", "date_only": false, "value": "2026-08-05T00:00:36.484134Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberok_news/173", "record": "GHSA-V4PR-FM98-W9PG", "field": "creation_timestamp", "uuid": "e5d1fcee-75e2-4918-8f8c-02b609b59434", "url": "https://t.me/cyberok_news/173"}, {"timestamp": "2026-08-06T00:00:57.121Z", "date_only": false, "value": "2026-08-06T00:00:57.121949Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberok_news/173", "record": "GHSA-V4PR-FM98-W9PG", "field": "creation_timestamp", "uuid": "3fb08025-9d77-47ad-8f80-06b7a4d6c846", "url": "https://t.me/cyberok_news/173", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-13T07:05:56.342Z", "anchors": {"origin": {"timestamp": "2026-01-07T19:20:19Z", "date_only": false, "value": "2026-01-07T19:20:19Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-v4pr-fm98-w9pg", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-01-07T19:20:19Z", "date_only": false, "value": "2026-01-07T19:20:19Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-v4pr-fm98-w9pg", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-01-08T01:03:43Z", "date_only": false, "value": "2026-01-08T01:03:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/2ek7eyEQkPBVm_oE9OK31_C8c0inA6djA7KhdWeXyx-F_04", "record": "GHSA-V4PR-FM98-W9PG", "field": "creation_timestamp", "uuid": "59b683ee-35a1-45a9-aeed-efad8043b0e3", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 20604.0, "hours": 5.723333333333334, "days": 0.23847222222222222, "min_seconds": 20604.0, "max_seconds": 20604.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-01-07T19:20:19Z", "date_only": false, "value": "2026-01-07T19:20:19Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-v4pr-fm98-w9pg", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-01-08T01:03:43Z", "date_only": false, "value": "2026-01-08T01:03:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/2ek7eyEQkPBVm_oE9OK31_C8c0inA6djA7KhdWeXyx-F_04", "record": "GHSA-V4PR-FM98-W9PG", "field": "creation_timestamp", "uuid": "59b683ee-35a1-45a9-aeed-efad8043b0e3", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 26739937.342976, "hours": 7427.760373048889, "days": 309.4900155437037, "min_seconds": 26739937.342976, "max_seconds": 26739937.342976, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-01-07T19:20:19Z", "date_only": false, "value": "2026-01-07T19:20:19Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-v4pr-fm98-w9pg", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-13T07:05:56.342Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 26719333.342976, "hours": 7422.037039715556, "days": 309.2515433214815, "min_seconds": 26719333.342976, "max_seconds": 26719333.342976, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-01-08T01:03:43Z", "date_only": false, "value": "2026-01-08T01:03:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/2ek7eyEQkPBVm_oE9OK31_C8c0inA6djA7KhdWeXyx-F_04", "record": "GHSA-V4PR-FM98-W9PG", "field": "creation_timestamp", "uuid": "59b683ee-35a1-45a9-aeed-efad8043b0e3", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-13T07:05:56.342Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}