{"metadata": {"vulnerability": "cve-2026-100227", "count": 16, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-25T15:15:43.370Z", "date_only": false, "value": "2026-09-25T15:15:43.370Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-100227", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-09T10:19:40.756Z", "date_only": false, "value": "2026-10-09T10:19:40.756Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-100227", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-09T10:19:40.756Z", "date_only": false, "value": "2026-10-09T10:19:40.756Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "cve-2026-100227", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-09T10:47:01.507Z", "date_only": false, "value": "2026-10-09T10:47:01.507920Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/suriq.io/post/3mxgscqkvh32h", "record": "CVE-2026-100227", "field": "creation_timestamp", "uuid": "aed309bb-1545-4f30-aa1e-9e53c961e22a", "content": "CVE-2026-100227: The Apache Software Foundation patched three Apache CXF flaws: XML signature wrapping, MTOM attachment DoS (CVE-2026-107937), and missing TLS hostname verification in the Netty client (CVE-2026-107938). Fixed in 4.2.4, 4.1.9, 3.6.13.", "url": "https://bsky.app/profile/suriq.io/post/3mxgscqkvh32h"}, {"timestamp": "2026-10-09T11:07:51.197Z", "date_only": false, "value": "2026-10-09T11:07:51.197Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2026-100227", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-09T11:08:21.106Z", "date_only": false, "value": "2026-10-09T11:08:21.106042Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/ahsauxxn6j4w7", "record": "CVE-2026-100227", "field": "creation_timestamp", "uuid": "4824acd1-aa2f-4883-8ef5-ee6ade1e4d27", "content": "CVE-2026-100227: Apache CXF: XML Signature wrapping in JAX-RS XML Security", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/ahsauxxn6j4w7"}, {"timestamp": "2026-10-09T11:17:01Z", "date_only": false, "value": "2026-10-09T11:17:01Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M89P-3QW6-FH4R", "record": "GHSA-M89P-3QW6-FH4R", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-09T11:17:01.993Z", "date_only": false, "value": "2026-10-09T11:17:01.993", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-100227", "record": "FKIE_CVE-2026-100227", "field": "published"}, {"timestamp": "2026-10-09T11:39:26.965Z", "date_only": false, "value": "2026-10-09T11:39:26.965962Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7j4kww5xz3vsj", "record": "CVE-2026-100227", "field": "creation_timestamp", "uuid": "35f5fecc-94f4-48c4-b4ce-656b2c8cf7fb", "content": "CVE-2026-100227 - Apache CXF: XML Signature wrapping in JAX-RS XML Security\nCVE ID : CVE-2026-100227\n \n Published : Oct. 9, 2026, 10:19 a.m. | 1\u00a0hour ago\n \n Description : Improper Verification of Cryptographic Signature vulnerability in Apache CXF's JAX-RS XML Security module....", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/7j4kww5xz3vsj"}, {"timestamp": "2026-10-09T12:31:43Z", "date_only": false, "value": "2026-10-09T12:31:43Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M89P-3QW6-FH4R", "record": "GHSA-M89P-3QW6-FH4R", "field": "published"}, {"timestamp": "2026-10-15T17:41:39.286Z", "date_only": false, "value": "2026-10-15T17:41:39.286657Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-100227", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-15T17:41:39.286Z", "date_only": false, "value": "2026-10-15T17:41:39.286657Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-100227", "record": "FKIE_CVE-2026-100227", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T17:42:03.056Z", "date_only": false, "value": "2026-10-15T17:42:03.056Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-100227", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T17:42:03.056Z", "date_only": false, "value": "2026-10-15T17:42:03.056Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-100227", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T18:31:41Z", "date_only": false, "value": "2026-10-15T18:31:41Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M89P-3QW6-FH4R", "record": "GHSA-M89P-3QW6-FH4R", "field": "modified"}, {"timestamp": "2026-10-16T18:09:15.430Z", "date_only": false, "value": "2026-10-16T18:09:15.430", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-100227", "record": "FKIE_CVE-2026-100227", "field": "lastModified"}]}