{"vulnerability": "cve-2026-5472", "sightings": [{"uuid": "1f6068ec-2668-41a4-a7d0-f60edb36e7e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54727", "type": "seen", "source": "https://gist.github.com/alon710/0b988f8772f0747494691334f261cc01", "content": "# CVE-2026-54727: CVE-2026-54727: Container Isolation Bypass in proot-distro via Malicious Restore Archive\n\n> **CVSS Score:** 8.2\n> **Published:** 2026-07-29\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54727\n\n## Summary\nA container isolation bypass vulnerability exists in proot-distro prior to version 5.1.6. The utility accepted hardlink entries pointing outside the container directory being restored, allowing cross-container file read and write capabilities.\n\n## TL;DR\nA container boundary bypass in proot-distro allows a malicious restore archive to read or write files inside other isolated containers on the device.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-668\n- **Attack Vector**: Local\n- **CVSS Score**: 8.2 (High)\n- **Impact**: Cross-container read and write access\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- proot-distro\n- **proot-distro**: < 5.1.6 (Fixed in: `5.1.6`)\n\n## Mitigation\n\n- Keep proot-distro updated to the latest version via Termux package management\n- Do not restore unauthenticated, third-party, or untrusted container backup archives\n- Enforce static analysis or pre-extraction checks on backup tarballs\n\n**Remediation Steps:**\n1. Execute 'pkg update && pkg upgrade proot-distro' to upgrade to v5.1.6 or later\n2. Audit any existing container layouts or verify nested hardlink/symlink properties\n3. Configure automated package scanners to flag outdated variants of proot-distro\n\n## References\n\n- [GitHub Security Advisory (GHSA-7h3g-4w2f-fj2f)](https://github.com/termux/proot-distro/security/advisories/GHSA-7h3g-4w2f-fj2f)\n- [proot-distro v5.1.6 Release Notes](https://github.com/termux/proot-distro/releases/tag/v5.1.6)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54727) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-30T00:32:17.081266Z"}, {"uuid": "1338e7f8-3e45-4016-8136-b2888544f32f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54722", "type": "seen", "source": "https://bsky.app/profile/kynth.studio/post/3mruwkbv7zy2r", "content": "dssrf's SSRF bypass (CVE-2026-54722): it strips '@' from the raw URL string before new URL() parses it, so the hostname gets corrupted and internal IPs are never checked. Validate parser output, never raw text. #software", "creation_timestamp": "2026-07-30T17:08:56.046967Z"}, {"uuid": "5fda123c-860f-4387-ba7e-6a8f003109cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54722", "type": "seen", "source": "https://gist.github.com/alon710/a4455529dbdac06b73f9e7a68363941a", "content": "# CVE-2026-54722: CVE-2026-54722: Server-Side Request Forgery (SSRF) Bypass via Userinfo Stripping in dssrf-js\n\n> **CVSS Score:** 8.7\n> **Published:** 2026-07-30\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54722\n\n## Summary\nAn SSRF validation bypass exists in dssrf-js (v1.0.3 and prior) due to an improper string normalization sequence inside is_url_safe. Before validating the host using Node's WHATWG parser, the helper strips the '@' symbol. This corrupts the parser's authority resolution, while the application's client requests the original, un-sanitized string containing internal IP targets.\n\n## TL;DR\nThe dssrf-js library before 1.0.4 strips the '@' character from URLs during safety validation. This causes the library to validate a safe, mutated host string (e.g., evil.com127.0.0.1) while the downstream client retrieves the original URL, connecting directly to restricted local resources.\n\n## Technical Details\n\n- **CWE ID**: CWE-76: Improper Neutralization of Equivalent Special Elements\n- **Attack Vector**: Network (AV:N)\n- **CVSS v4.0 Score**: 8.7\n- **EPSS Score**: N/A (New 2026 Vulnerability)\n- **Impact**: High Integrity Compromise (VI:H)\n- **Exploit Status**: None (No active public exploits cataloged)\n- **KEV Status**: False\n\n## Affected Systems\n\n- HackingRepo/dssrf-js\n- **dssrf-js**: < 1.0.4 (Fixed in: `1.0.4`)\n\n## Mitigation\n\n- Upgrade the dssrf-js dependency to version 1.0.4 or higher.\n- Implement application-level sanitation to reject URLs containing userinfo sequences before validation.\n- Establish strict egress firewall filtering to block requests targeting local subnets and loopback scopes.\n\n**Remediation Steps:**\n1. Navigate to the application root directory containing package.json.\n2. Execute 'npm install dssrf-js@1.0.4' to upgrade the package version.\n3. Verify that all test cases evaluating internal IP ranges continue to block SSRF requests successfully.\n\n## References\n\n- [Official GitHub Advisory](https://github.com/HackingRepo/dssrf-js/security/advisories/GHSA-cg4g-m8jx-vjv2)\n- [GitHub Issue #97](https://github.com/HackingRepo/dssrf-js/issues/97)\n- [GitHub Pull Request #98](https://github.com/HackingRepo/dssrf-js/pull/98)\n- [Vulnerability Fix Commit](https://github.com/HackingRepo/dssrf-js/commit/9211f91bf532433a1a1b27d946571546a63664b3)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-54722)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54722) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-30T18:31:07.073177Z"}, {"uuid": "d47aacdf-26f2-451c-899b-1d10f33a5ed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54722", "type": "published-proof-of-concept", "source": "https://github.com/HackingRepo/dssrf-js/security/advisories/GHSA-cg4g-m8jx-vjv2", "content": "", "creation_timestamp": "2026-07-30T18:35:06.150524Z"}, {"uuid": "def2e5eb-9b40-404e-b1f3-d50a32e0b545", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54722", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5lrfapvhcrzhy", "content": "CVE-2026-54722 - dssrf: there a critical security bug with remove_at_symbol_in_string\nCVE ID : CVE-2026-54722\n \n Published : July 30, 2026, 5:16 p.m. | 1\u00a0hour, 21\u00a0minutes ago\n \n Description : DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF ...", "creation_timestamp": "2026-07-30T18:56:13.143049Z"}, {"uuid": "5d23e051-2776-4e2c-a941-270f19e442ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54727", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mrvbjpdcuz2x", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-54727](https://github.com/termux/proot-distro/commit/98aff324b7d8500ff75a8ca9ac087ee636...\nhttps://github.com/termux/proot-distro/commit/98aff324b7d8500ff75a8ca9ac087ee636be4716 #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-07-30T20:25:27.583087Z"}, {"uuid": "e077fd35-507d-49dd-abe3-0f0a8d0a51de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54729", "type": "seen", "source": "https://gist.github.com/alon710/3725c6658b9e4e7f9bed06e9ce214b76", "content": "# CVE-2026-54729: CVE-2026-54729: SSRF Protection Bypass in dssrf-js via NXDOMAIN Resolution Discrepancy\n\n> **CVSS Score:** 8.7\n> **Published:** 2026-07-31\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54729\n\n## Summary\nCVE-2026-54729 is a critical Server-Side Request Forgery (SSRF) bypass vulnerability in the dssrf-js Node.js library prior to version 1.0.5. The flaw occurs because the library's DNS validation mechanism incorrectly treats domains like 'localhost' as safe when the configured upstream DNS resolver returns NXDOMAIN. Since the system's HTTP client later falls back to OS-level resolution (resolving 'localhost' to '127.0.0.1'), attackers can bypass validation and access internal loopback addresses.\n\n## TL;DR\nThe dssrf-js library fails to detect local/internal domains if upstream DNS servers return NXDOMAIN, allowing attackers to perform unauthenticated Server-Side Request Forgery (SSRF) to loopback endpoints.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 8.7 (High)\n- **Exploit Status**: PoC\n- **Impact**: Integrity (High)\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- dssrf-js (Node.js library)\n- **dssrf-js**: < 1.0.5 (Fixed in: `1.0.5`)\n\n## Mitigation\n\n- Upgrade to dssrf-js version 1.0.5 or higher.\n- Implement network egress filtering to block connections to local and RFC 1918 addresses.\n- Deploy dedicated outbound HTTP forward proxies to intercept and validate outbound traffic.\n\n**Remediation Steps:**\n1. Audit the dependency graph for vulnerable versions of 'dssrf-js'.\n2. Update package.json to require version '^1.0.5' and run 'npm install'.\n3. Configure application servers with firewall rules blocking outbound TCP to 127.0.0.0/8 and 169.254.169.254.\n\n## References\n\n- [GitHub Security Advisory GHSA-5846-7qm3-r52j](https://github.com/HackingRepo/dssrf-js/security/advisories/GHSA-5846-7qm3-r52j)\n- [Fix Commit 668c21792cd1252baf779a176aa652e2b4c0067d](https://github.com/HackingRepo/dssrf-js/commit/668c21792cd1252baf779a176aa652e2b4c0067d)\n- [CVE-2026-54729 Record](https://www.cve.org/CVERecord?id=CVE-2026-54729)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54729) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-31T17:31:37.590423Z"}, {"uuid": "dff6ca37-90bf-4e55-be54-99db7aab4576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54725", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrxjr42xr42o", "content": "CVE-2026-54725 - bank-vaults\nAn attacker can create ConfigMaps or Secrets that cause the Vault webhook to make arbitrary outbound HTTP connections, potentially exfiltrating ServiceAccount JWTs. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#bankvaults #Golang #CVE #infosec", "creation_timestamp": "2026-07-31T17:58:05.079072Z"}, {"uuid": "ec207915-c7d6-42ef-b933-3d885a95051c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54725", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrxlgcrm3u2i", "content": "A critical flaw in bank-vaults' Kubernetes secret injector, vault-secrets-webhook (CVSS 9.6), lets anyone who can create a ConfigMap steal ServiceAccount tokens and read HashiCorp Vault secrets.\n\nAffects versions up to 1.22.2.\n\nFix: upgrade to 1.23.1. (CVE-2026-54725)", "creation_timestamp": "2026-07-31T18:27:51.544574Z"}, {"uuid": "fc424d8a-8653-4530-8d62-285ae473bfc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54725", "type": "published-proof-of-concept", "source": "https://github.com/bank-vaults/vault-secrets-webhook/security/advisories/GHSA-r2v3-8gwf-7ghm", "content": "", "creation_timestamp": "2026-07-31T18:35:03.821931Z"}, {"uuid": "dc33a1e6-73a6-4c5f-87ba-817da12efc4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54729", "type": "published-proof-of-concept", "source": "https://github.com/HackingRepo/dssrf-js/security/advisories/GHSA-5846-7qm3-r52j", "content": "", "creation_timestamp": "2026-07-31T18:35:06.401884Z"}, {"uuid": "c7c69958-544a-4f48-be5b-6f2248f16a4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54725", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrxowcc2lk2h", "content": "CRITICAL SSRF (CVE-2026-54725) in bank-vaults vault-secrets-webhook lets attackers steal ServiceAccount JWTs. Upgrade to 1.23.1 ASAP. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-54725-cwe-918-server-side-request-forgery-ssrf-in-bank-vaults-vault-secrets-webhook-ec0efb4a3e2ca6ff #OffSeq #Kubernetes...", "creation_timestamp": "2026-07-31T19:30:28.573537Z"}, {"uuid": "13f79dd0-f97f-463d-90cf-057dc88681a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54720", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpo33b5zs52o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54720 \u0432 Silverstripe Framework: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A94EF7B5-FD74-4DF4-B78E-2838C91AD492", "creation_timestamp": "2026-07-02T12:50:58.790229Z"}, {"uuid": "801a631b-477c-4686-a435-02179a386497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54721", "type": "seen", "source": "https://gist.github.com/alon710/39b101902c398808f3c4258d20b82798", "content": "# CVE-2026-54721: CVE-2026-54721: Remote Code Execution via Server-Side Template Injection in Silverstripe UserForms\n\n> **CVSS Score:** 8.8\n> **Published:** 2026-08-27\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54721\n\n## Summary\nA Server-Side Template Injection (SSTI) vulnerability in the Silverstripe UserForms module allows authenticated CMS users with basic form configuration privileges to achieve remote code execution (RCE). The flaw resides in the processing of the email recipient subject field, where user-supplied template translation tags are evaluated by the template engine, leading to arbitrary PHP execution via dynamic variable interpolation.\n\n## TL;DR\nAuthenticated CMS users can execute arbitrary PHP code on the server by embedding crafted translation tags in the form email subject field, which are evaluated dynamically during form submission.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94: Improper Control of Generation of Code ('Code Injection')\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 8.8 (High)\n- **Exploit Status**: Proof of Concept available in tests\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Silverstripe CMS with UserForms module version < 6.4.9\n- Silverstripe CMS with UserForms module version >= 7.0.0, < 7.0.7\n- Silverstripe CMS with UserForms module version >= 7.1.0, < 7.1.1\n- **silverstripe/silverstripe-userforms**: < 6.4.9 (Fixed in: `6.4.9`)\n- **silverstripe/silverstripe-userforms**: >= 7.0.0, < 7.0.7 (Fixed in: `7.0.7`)\n- **silverstripe/silverstripe-userforms**: >= 7.1.0, < 7.1.1 (Fixed in: `7.1.1`)\n\n## Mitigation\n\n- Apply security updates to the UserForms module and core template engine.\n- Enforce execution control restrictions on upload folders like the assets directory.\n- Implement restrictive RBAC policies to ensure only trusted administrators can configure form emails.\n\n**Remediation Steps:**\n1. Verify the current version of silverstripe/silverstripe-userforms using the command: composer show silverstripe/silverstripe-userforms\n2. Update Composer packages to pull down the latest patched security releases.\n3. Run 'dev/build' to clear the template compilation cache on the target server.\n4. Audit active CMS accounts and restrict write access to UserForms configurations.\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54721) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-27T17:32:22.803990Z"}, {"uuid": "47af2f6e-c775-42d1-9416-846a38f27aee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54720", "type": "seen", "source": "https://gist.github.com/alon710/6538c11be757e60d0a7d8025d09bf775", "content": "# CVE-2026-54720: CVE-2026-54720: Stored Cross-Site Scripting (XSS) via Sandbox Bypass in Silverstripe Framework\n\n> **CVSS Score:** 5.4\n> **Published:** 2026-08-27\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54720\n\n## Summary\nCVE-2026-54720 is a stored Cross-Site Scripting (XSS) vulnerability inside the Silverstripe Framework's media shortcode processor. Due to a flawed performance optimization, HTML inputs containing two or fewer opening angle brackets bypassed security sandboxing. This flaw allows authenticated or lower-privileged users to inject administrative panel payloads that execute arbitrary client-side JavaScript when viewed by system administrators.\n\n## TL;DR\nA design shortcut in Silverstripe Framework's iframe sandboxing allows attackers to bypass security filters using simple single-tag iframe embeds, enabling unauthenticated or lower-privileged administrative session takeover.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-79\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 5.4\n- **EPSS Score**: 0.00263 (Percentile: 17.73%)\n- **Impact**: Stored XSS leading to Administrative Session Compromise\n- **Exploit Status**: Proof of Concept (PoC) documented\n- **KEV Status**: Not listed in CISA KEV Catalog\n\n## Affected Systems\n\n- Silverstripe Content Management System (CMS) deployments utilising the silverstripe/framework composer package.\n- **silverstripe-framework**: < 6.2.2 (Fixed in: `6.2.2`)\n\n## Mitigation\n\n- Upgrade the silverstripe/framework composer dependency to version 6.2.2 or above.\n- Deploy WAF rules to intercept raw iframe submissions containing event handlers or non-standard URI schemes.\n- Implement a robust Content Security Policy (CSP) prohibiting unsanitized inline scripts ('unsafe-inline') and restricting frame origins.\n\n**Remediation Steps:**\n1. Navigate to the project root directory.\n2. Run the composer command: composer update silverstripe/framework to pull down the patch.\n3. Clear the framework cache configuration to ensure the updated EmbedShortcodeProvider is initialized.\n4. Verify the application templates and media embed functions in a staging environment.\n\n## References\n\n- [GitHub Security Advisory GHSA-gvrw-qqp5-jgc5](https://github.com/silverstripe/silverstripe-framework/security/advisories/GHSA-gvrw-qqp5-jgc5)\n- [Silverstripe Official Security Advisory](https://www.silverstripe.org/download/security-releases/cve-2026-54720)\n- [Official Patch Commit](https://github.com/silverstripe/silverstripe-framework/commit/1bcb02adfc365c6436dc26ab2f6dd32d97f3979b)\n- [Official GitHub Pull Request](https://github.com/silverstripe/silverstripe-framework/pull/11993)\n- [Silverstripe Framework 6.2.2 Release Tag](https://github.com/silverstripe/silverstripe-framework/releases/tag/6.2.2)\n- [CVE-2026-54720 Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-54720)\n- [NVD Vulnerability Database Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-54720)\n- [CVE V5 Record Repository](https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54720.json)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54720) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-28T02:33:08.006734Z"}, {"uuid": "2cddd804-6c03-4d60-b0fd-fe175801c35b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54727", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrsiee5rkj2b", "content": "CVE-2026-54727 - proot-distro has a Container Isolation Bypass via Crafted Restore Archive\nCVE ID : CVE-2026-54727\n \n Published : July 29, 2026, 5:16 p.m. | 27\u00a0minutes ago\n \n Description : proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-d...", "creation_timestamp": "2026-07-29T17:49:55.419980Z"}, {"uuid": "64c13977-1c9f-43a1-857f-135d8130169b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54727", "type": "published-proof-of-concept", "source": "https://github.com/termux/proot-distro/security/advisories/GHSA-7h3g-4w2f-fj2f", "content": "", "creation_timestamp": "2026-07-29T18:35:08.632639Z"}]}