{"metadata": {"vulnerability": "cve-2020-26290", "count": 23, "kinds": {"milestone": 5, "sighting": 1, "kev": 0, "other": 17}}, "data": [{"timestamp": "2020-10-01T00:00:00Z", "date_only": false, "value": "2020-10-01T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2020-26290", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-12-28T00:00:00Z", "date_only": true, "value": "2020-12-28", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2020-26290", "record": "GSD-2020-26290", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2020-12-28T19:15:17Z", "date_only": false, "value": "2020-12-28T19:15:17.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2020-26290", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-12-28T19:15:17Z", "date_only": false, "value": "2020-12-28T19:15:17.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2020-26290", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-12-28T20:15:00Z", "date_only": false, "value": "2020-12-28T20:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-26290", "record": "GSD-2020-26290", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-12-28T20:15:12.493Z", "date_only": false, "value": "2020-12-28T20:15:12.493", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-26290", "record": "FKIE_CVE-2020-26290", "field": "published"}, {"timestamp": "2020-12-28T22:28:49Z", "date_only": false, "value": "2020-12-28T22:28:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/21363", "record": "CVE-2020-26290", "field": "creation_timestamp", "uuid": "16527282-4251-4687-b142-0b9883754f66", "content": "\u203c CVE-2020-26290 \u203c\n\nDex is a federated OpenID Connect provider written in Go. In Dex before version 2.27.0 there is a critical set of vulnerabilities which impacts users leveraging the SAML connector. The vulnerabilities enables potential signature bypass due to issues with XML encoding in the underlying Go library. The vulnerabilities have been addressed in version 2.27.0 by using the xml-roundtrip-validator from Mattermost (see related references).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/21363"}, {"timestamp": "2020-12-30T00:00:00Z", "date_only": true, "value": "2020-12-30", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2020-26290", "record": "GSD-2020-26290", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2020-12-30T15:12:00Z", "date_only": false, "value": "2020-12-30T15:12Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-26290", "record": "GSD-2020-26290", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2021-05-21T20:49:36Z", "date_only": false, "value": "2021-05-21T20:49:36Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M9HP-7R99-94H5", "record": "GHSA-M9HP-7R99-94H5", "field": "modified"}, {"timestamp": "2021-12-20T00:00:00Z", "date_only": true, "value": "2021-12-20", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2020-26290", "record": "GSD-2020-26290", "field": "namespaces.gitlab.com.advisories.1.date"}, {"timestamp": "2021-12-20T00:00:00Z", "date_only": true, "value": "2021-12-20", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2020-26290", "record": "GSD-2020-26290", "field": "namespaces.gitlab.com.advisories.1.pubdate"}, {"timestamp": "2021-12-20T17:53:53Z", "date_only": false, "value": "2021-12-20T17:53:53Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M9HP-7R99-94H5", "record": "GHSA-M9HP-7R99-94H5", "field": "published"}, {"timestamp": "2023-12-13T01:22:08.712Z", "date_only": false, "value": "2023-12-13T01:22:08.712061Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-26290", "record": "GSD-2020-26290", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10714-1", "record": "OPENSUSE-SU-2024:10714-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10714-1", "record": "OPENSUSE-SU-2024:10714-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10714-1", "record": "OPENSUSE-SU-2024:10714-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10714-1", "record": "OPENSUSE-SU-2024:10714-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-08-04T15:56:04.350Z", "date_only": false, "value": "2024-08-04T15:56:04.350Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2020-26290", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T15:56:04.350Z", "date_only": false, "value": "2024-08-04T15:56:04.350Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2020-26290", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T03:08:00.583Z", "date_only": false, "value": "2026-06-17T03:08:00.583", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-26290", "record": "FKIE_CVE-2020-26290", "field": "lastModified"}, {"timestamp": "2026-09-20T20:04:17Z", "date_only": false, "value": "2026-09-20T20:04:17Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10714-1", "record": "OPENSUSE-SU-2024:10714-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:04:17Z", "date_only": false, "value": "2026-09-20T20:04:17Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10714-1", "record": "OPENSUSE-SU-2024:10714-1", "field": "document.tracking.current_release_date"}]}