{"id":"EUVD-2025-26382","revision":null,"records":[{"revision":"95d76b7a183d49c89fb349330854c299","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-58160","aliases":[],"title":"Tracing logging user input may result in poisoning logs with ANSI escape sequences","description":"tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information. Prior to version 0.3.20, tracing-subscriber was vulnerable to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape sequences could be injected into terminal output when logged, potentially allowing attackers to manipulate terminal title bars, clear screens or modify terminal display, and potentially mislead users through terminal manipulation. tracing-subscriber version 0.3.20 fixes this vulnerability by escaping ANSI control characters when writing events to destinations that may be printed to the terminal. A workaround involves avoiding printing logs to terminal emulators without escaping ANSI control sequences.","state":0,"publishedAt":"2025-08-29T21:28:22.563+00:00","modifiedAt":"2025-09-02T14:08:42.323+00:00","affected":[{"ecosystem":"Vendor product","name":"tracing","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"tokio-rs\",\n                    \"product\": \"tracing\",\n                    \"versions\": [\n                        {\n                            \"version\": \"< 0.3.20\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","score":2.3,"severity":"LOW"}],"references":["https://github.com/tokio-rs/tracing/security/advisories/GHSA-xwfj-jgwm-7wp5"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-58160","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-58160","identifiers":["CVE-2025-58160"]},"retained":false,"historicalAffected":[]},{"revision":"324521e47d394715b0e1e5bfb961848e","observedAt":"2026-11-09T03:13:09.565+00:00","statement":{"source":"euvd","id":"EUVD-2025-26382","aliases":["CVE-2025-58160","GHSA-xwfj-jgwm-7wp5"],"title":"tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information. Prior to version 0.3.20, tracing-subscriber was vulnerable to ANSI escape sequence injection attacks. Untrusted user input con…","description":"tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information. Prior to version 0.3.20, tracing-subscriber was vulnerable to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape sequences could be injected into terminal output when logged, potentially allowing attackers to manipulate terminal title bars, clear screens or modify terminal display, and potentially mislead users through terminal manipulation. tracing-subscriber version 0.3.20 fixes this vulnerability by escaping ANSI control characters when writing events to destinations that may be printed to the terminal. A workaround involves avoiding printing logs to terminal emulators without escaping ANSI control sequences.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","score":2.3,"severity":null}],"references":["https://github.com/tokio-rs/tracing/security/advisories/GHSA-xwfj-jgwm-7wp5"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-26382","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Aug 29, 2025, 9:28:22 PM","dateUpdated":"Sep 2, 2025, 2:08:42 PM"},"relatedAdvisories":[{"id":"openSUSE-SU-2026:11028-1","title":"librav1e0_8-0.8.1-2.1 on GA media","vulnerabilityIds":["CVE-2025-58160"]},{"id":"openSUSE-SU-2026:22075-1","title":"Security update for agama","vulnerabilityIds":["CVE-2025-58160","CVE-2026-25541"]},{"id":"openSUSE-SU-2026:21689-1","title":"Security update for gstreamer-devtools","vulnerabilityIds":["CVE-2025-4574","CVE-2025-58160","CVE-2026-25541","CVE-2026-25727","CVE-2026-72813","CVE-2026-72814"]},{"id":"openSUSE-SU-2026:11679-1","title":"agama-24+0.a836cced5-54.1 on GA media","vulnerabilityIds":["CVE-2025-58160","CVE-2026-25541"]},{"id":"openSUSE-SU-2025:15512-1","title":"bpftop-0.7.1-1.1 on GA media","vulnerabilityIds":["CVE-2025-58160"]},{"id":"openSUSE-SU-2025:15540-1","title":"rustup-1.28.2~0-2.1 on GA media","vulnerabilityIds":["CVE-2025-58160"]},{"id":"SUSE-SU-2026:22380-1","title":"Security update for loupe","vulnerabilityIds":["CVE-2025-58160"]},{"id":"openSUSE-SU-2026:20180-1","title":"Security update for python-maturin","vulnerabilityIds":["CVE-2025-58160"]},{"id":"openSUSE-SU-2025:15517-1","title":"himmelblau-1.2.2+git.0.2d04bca-1.1 on GA media","vulnerabilityIds":["CVE-2025-58160"]},{"id":"openSUSE-SU-2025:20114-1","title":"Security update for himmelblau","vulnerabilityIds":["CVE-2025-58160","CVE-2025-59044"]},{"id":"openSUSE-SU-2025:15518-1","title":"python311-maturin-1.9.4-1.1 on GA media","vulnerabilityIds":["CVE-2025-58160"]},{"id":"SUSE-SU-2026:20096-1","title":"Security update for cargo-c","vulnerabilityIds":["CVE-2024-12224","CVE-2025-4574","CVE-2025-58160"]},{"id":"SUSE-SU-2025:3869-1","title":"Security update for himmelblau","vulnerabilityIds":["CVE-2025-58160"]},{"id":"openSUSE-SU-2025:15519-1","title":"python311-ruff-0.12.11-2.1 on GA media","vulnerabilityIds":["CVE-2025-58160"]},{"id":"openSUSE-SU-2026:22016-1","title":"Security update for rustup","vulnerabilityIds":["CVE-2024-12224","CVE-2025-58160","CVE-2026-25541","CVE-2026-25727","CVE-2026-41676","CVE-2026-41677","CVE-2026-41678","CVE-2026-41681","CVE-2026-41898","CVE-2026-42327","CVE-2026-44662","CVE-2026-45784","CVE-2026-93599","CVE-2026-93600","CVE-2026-93601","CVE-2026-93602"]},{"id":"SUSE-SU-2026:23567-1","title":"Security update for rav1e","vulnerabilityIds":["CVE-2025-58160"]},{"id":"SUSE-SU-2026:20335-1","title":"Security update for python-maturin","vulnerabilityIds":["CVE-2025-58160"]},{"id":"openSUSE-SU-2026:12402-1","title":"mdbook-0.5.4-1.1 on GA media","vulnerabilityIds":["CVE-2023-26964","CVE-2025-58160"]},{"id":"SUSE-SU-2026:23572-1","title":"Security update for gstreamer-devtools","vulnerabilityIds":["CVE-2025-4574","CVE-2025-58160","CVE-2026-25541","CVE-2026-25727","CVE-2026-72813","CVE-2026-72814"]},{"id":"SUSE-SU-2026:20077-1","title":"Security update for python-uv","vulnerabilityIds":["CVE-2025-58160","CVE-2025-62518"]},{"id":"SUSE-SU-2025:21158-1","title":"Security update for himmelblau","vulnerabilityIds":["CVE-2025-58160","CVE-2025-59044"]},{"id":"SUSE-SU-2026:23607-1","title":"Security update for python-ruff","vulnerabilityIds":["CVE-2025-58160"]},{"id":"SUSE-FU-2026:20990-1","title":"Feature update for himmelblau","vulnerabilityIds":["CVE-2025-54882","CVE-2025-58160","CVE-2026-25727","CVE-2026-31979"]},{"id":"openSUSE-SU-2025:15551-1","title":"cargo-c-0.10.3~git0.ee7d7ef-4.1 on GA media","vulnerabilityIds":["CVE-2024-12224","CVE-2025-4574","CVE-2025-58160"]},{"id":"SUSE-SU-2026:1361-1","title":"Security update for himmelblau","vulnerabilityIds":["CVE-2024-11738","CVE-2025-53013","CVE-2025-54882","CVE-2025-58160","CVE-2026-25727","CVE-2026-31979","CVE-2026-34397"]},{"id":"SUSE-SU-2025:03082-1","title":"Security update for python-maturin","vulnerabilityIds":["CVE-2025-58160"]},{"id":"openSUSE-SU-2026:21681-1","title":"Security update for rav1e","vulnerabilityIds":["CVE-2025-58160"]},{"id":"SUSE-SU-2026:24236-1","title":"Security update for agama","vulnerabilityIds":["CVE-2025-58160","CVE-2026-25541"]},{"id":"SUSE-SU-2026:24014-1","title":"Security update for rustup","vulnerabilityIds":["CVE-2024-12224","CVE-2025-58160","CVE-2026-25541","CVE-2026-25727","CVE-2026-41676","CVE-2026-41677","CVE-2026-41678","CVE-2026-41681","CVE-2026-41898","CVE-2026-42327","CVE-2026-44662","CVE-2026-45784","CVE-2026-93599","CVE-2026-93600","CVE-2026-93601","CVE-2026-93602"]},{"id":"openSUSE-SU-2026:21134-1","title":"Security update for glycin-loaders","vulnerabilityIds":["CVE-2025-55159","CVE-2025-58160"]},{"id":"openSUSE-SU-2025-20114-1","title":"Security update for himmelblau","vulnerabilityIds":["CVE-2025-58160","CVE-2025-59044"]},{"id":"openSUSE-SU-2025:15514-1","title":"python311-uv-0.8.14-2.1 on GA media","vulnerabilityIds":["CVE-2025-58160"]},{"id":"openSUSE-FU-2026:20453-1","title":"Feature update for himmelblau","vulnerabilityIds":["CVE-2025-54882","CVE-2025-58160","CVE-2026-25727","CVE-2026-31979"]},{"id":"SUSE-SU-2026:22302-1","title":"Security update for glycin-loaders","vulnerabilityIds":["CVE-2025-55159","CVE-2025-58160"]},{"id":"openSUSE-SU-2025:15550-1","title":"cargo-audit-0.21.2~git0.18e58c2-2.1 on GA media","vulnerabilityIds":["CVE-2024-12224","CVE-2025-4574","CVE-2025-58160"]},{"id":"msrc_CVE-2025-58160","title":"Tracing logging user input may result in poisoning logs with ANSI escape sequences","vulnerabilityIds":["CVE-2025-58160"]},{"id":"openSUSE-SU-2025:15552-1","title":"cargo-packaging-1.3.0+0-2.1 on GA media","vulnerabilityIds":["CVE-2025-58160"]},{"id":"SUSE-SU-2025:4091-1","title":"Security update for cargo-packaging, rust-bindgen","vulnerabilityIds":["CVE-2025-58160"]},{"id":"openSUSE-SU-2026:20026-1","title":"Security update for python-uv","vulnerabilityIds":["CVE-2025-58160","CVE-2025-62518"]},{"id":"openSUSE-SU-2026:21741-1","title":"Security update for python-ruff","vulnerabilityIds":["CVE-2025-58160"]},{"id":"openSUSE-SU-2026:20060-1","title":"Security update for cargo-c","vulnerabilityIds":["CVE-2024-12224","CVE-2025-4574","CVE-2025-58160"]},{"id":"openSUSE-SU-2026:21074-1","title":"Security update for loupe","vulnerabilityIds":["CVE-2025-58160"]},{"id":"SUSE-SU-2026:20235-1","title":"Security update for python-maturin","vulnerabilityIds":["CVE-2025-58160"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-26382","identifiers":["EUVD-2025-26382","CVE-2025-58160","GHSA-xwfj-jgwm-7wp5"]},"retained":false,"historicalAffected":[]},{"revision":"08a010c0323848129839282eab58240d","observedAt":"2026-10-25T03:17:18.142+00:00","statement":{"source":"nvd","id":"CVE-2025-58160","aliases":[],"title":"tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information. Prior to version 0.3.20, tracing-subscriber was vulnerable to ANSI escape sequence injection attacks. Untrusted user input con…","description":"tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information. Prior to version 0.3.20, tracing-subscriber was vulnerable to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape sequences could be injected into terminal output when logged, potentially allowing attackers to manipulate terminal title bars, clear screens or modify terminal display, and potentially mislead users through terminal manipulation. tracing-subscriber version 0.3.20 fixes this vulnerability by escaping ANSI control characters when writing events to destinations that may be printed to the terminal. A workaround involves avoiding printing logs to terminal emulators without escaping ANSI control sequences.","state":0,"publishedAt":"2025-08-29T22:15:32.887+00:00","modifiedAt":"2026-10-18T21:10:00.12+00:00","affected":[],"metrics":[{"system":"CVSS 4.0 · security-advisories@github.com · Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","score":2.3,"severity":"LOW"}],"references":["https://github.com/tokio-rs/tracing/security/advisories/GHSA-xwfj-jgwm-7wp5"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-58160","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Deferred","weaknesses":["CWE-150"],"productCriteria":[],"sourceDates":{"published":"2025-08-29T22:15:32.887","lastModified":"2026-10-18T21:10:00.120"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2025-58160","identifiers":["CVE-2025-58160"]},"retained":false,"historicalAffected":[]},{"revision":"5586c5cf35ce4e21992db1e9ad4155a2","observedAt":"2026-10-24T13:19:54.901+00:00","statement":{"source":"osv","id":"GHSA-xwfj-jgwm-7wp5","aliases":["CVE-2025-58160","RUSTSEC-2025-0055"],"title":" Tracing logging user input may result in poisoning logs with ANSI escape sequences","description":"### Impact\n\nPrevious versions of tracing-subscriber were vulnerable to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape sequences could be injected into terminal output when logged, potentially allowing attackers to:\n\n- Manipulate terminal title bars\n- Clear screens or modify terminal display\n- Potentially mislead users through terminal manipulation\n\nIn isolation, impact is minimal, however security issues have been found in terminal emulators that enabled an attacker to use ANSI escape sequences via logs to exploit vulnerabilities in the terminal emulator.\n\n### Patches\n\n`tracing-subscriber` version 0.3.20 fixes this vulnerability by escaping ANSI control characters in when writing events to destinations that may be printed to the terminal.\n\n### Workarounds\n\nAvoid printing logs to terminal emulators without escaping ANSI control sequences.\n\n### References\n\nhttps://www.packetlabs.net/posts/weaponizing-ansi-escape-sequences/\n\n\n### Acknowledgments\n\nWe would like to thank [zefr0x](http://github.com/zefr0x) who responsibly reported the issue at `security@tokio.rs`.\n\nIf you believe you have found a security vulnerability in any tokio-rs project, please email us at `security@tokio.rs`.","state":0,"publishedAt":"2025-08-29T20:33:56+00:00","modifiedAt":"2026-09-10T03:50:27.7668637+00:00","affected":[{"ecosystem":"crates.io","name":"tracing-subscriber","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.3.20"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V4","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"LOW"}],"references":["https://github.com/tokio-rs/tracing/security/advisories/GHSA-xwfj-jgwm-7wp5","https://nvd.nist.gov/vuln/detail/CVE-2025-58160","https://github.com/tokio-rs/tracing","https://rustsec.org/advisories/RUSTSEC-2025-0055.html"],"sourceUrl":"https://github.com/advisories/GHSA-xwfj-jgwm-7wp5","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-xwfj-jgwm-7wp5","identifiers":["GHSA-xwfj-jgwm-7wp5","CVE-2025-58160","RUSTSEC-2025-0055"]},"retained":false,"historicalAffected":[]},{"revision":"f80876173d904cc2852e96fe8f1d1629","observedAt":"2026-10-24T13:19:54.901+00:00","statement":{"source":"osv","id":"RUSTSEC-2025-0055","aliases":["CVE-2025-58160","GHSA-xwfj-jgwm-7wp5"],"title":"Logging user input may result in poisoning logs with ANSI escape sequences","description":"Previous versions of tracing-subscriber were vulnerable to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape sequences could be injected into terminal output when logged, potentially allowing attackers to:\n\n- Manipulate terminal title bars\n- Clear screens or modify terminal display\n- Potentially mislead users through terminal manipulation\n\nIn isolation, impact is minimal, however security issues have been found in terminal emulators that enabled an attacker to use ANSI escape sequences via logs to exploit vulnerabilities in the terminal emulator.\n\nThis was patched in [PR #3368](https://github.com/tokio-rs/tracing/pull/3368) to escape ANSI control characters from user input.","state":0,"publishedAt":"2025-08-29T12:00:00+00:00","modifiedAt":"2026-10-12T18:00:11.4954452+00:00","affected":[{"ecosystem":"crates.io","name":"tracing-subscriber","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0.0.0-0"},{"kind":"fixed","version":"0.3.20"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://crates.io/crates/tracing-subscriber","https://rustsec.org/advisories/RUSTSEC-2025-0055.html","https://github.com/tokio-rs/tracing/pull/3368"],"sourceUrl":"https://osv.dev/vulnerability/RUSTSEC-2025-0055","license":"OSV · upstream source license applies","key":"osv:RUSTSEC-2025-0055","identifiers":["RUSTSEC-2025-0055","CVE-2025-58160","GHSA-xwfj-jgwm-7wp5"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-11-09T06:02:15.5744295+00:00","complete":true,"records":1769,"lastAttemptAt":"2026-11-09T06:02:15.5744295+00:00","lastSuccessAt":"2026-11-09T06:02:15.8100724+00:00","error":null,"lastVerifiedAt":"2026-11-09T06:02:15.8100756+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-24e6fde7b744113daefb8f6135035fb8a5c69c9617c9c0d40574a0376532ffd3-61bf15172f364246efc204ad9b25e3f89710939e13c23b3efb3d009b5fdad808","complete":true,"records":421290,"lastAttemptAt":"2026-11-09T06:02:14.4940664+00:00","lastSuccessAt":"2026-11-09T05:02:14.5253969+00:00","error":"HttpRequestException","lastVerifiedAt":"2026-11-09T05:02:14.5383867+00:00","snapshotPublishedAt":"2026-11-09T04:29:38+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"euvd","scope":"Rolling EUVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global EUVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-52f0bd58a8564ba89a1952b43ef3bc92","complete":false,"records":13654,"lastAttemptAt":"2026-11-09T06:14:09.0160642+00:00","lastSuccessAt":"2026-11-09T06:14:09.013+00:00","error":"8 identifier lookups failed; latest failures include HTTP 403. Other identifiers were checked independently.","lastVerifiedAt":"2026-11-09T06:14:09.013+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13674,"expectedIdentifiers":13706,"failedIdentifiers":8},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-11-09T06:02:15.5744295+00:00","complete":true,"records":1096,"lastAttemptAt":"2026-11-09T06:02:15.5744295+00:00","lastSuccessAt":"2026-11-09T06:02:15.8108397+00:00","error":null,"lastVerifiedAt":"2026-11-09T06:02:15.81084+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"nvd","scope":"Rolling NVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global NVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-5a44a451442747cb81d83104fe1e7771","complete":true,"records":13666,"lastAttemptAt":"2026-11-09T06:02:16.371904+00:00","lastSuccessAt":"2026-11-09T02:08:52.274+00:00","error":null,"lastVerifiedAt":"2026-11-09T02:08:52.274+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13706,"expectedIdentifiers":13706,"failedIdentifiers":0},{"source":"osv:Go","scope":"Complete OSV Go ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"go-980593e6977a6d1b4fb1eed5a1ffe88a468736f89f0a06f710924ad59132c023","complete":true,"records":9914,"lastAttemptAt":"2026-11-09T06:02:15.5156789+00:00","lastSuccessAt":"2026-11-08T11:07:07.068788+00:00","error":null,"lastVerifiedAt":"2026-11-09T06:02:15.5156789+00:00","snapshotPublishedAt":"2026-11-08T11:02:46+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-fde804134ecdda0ddd5ff5c26ee1fff5a6fa659311f7ef2e51c6ad54964db0e2","complete":true,"records":1971,"lastAttemptAt":"2026-11-09T06:02:14.6970768+00:00","lastSuccessAt":"2026-11-06T19:03:17.0399903+00:00","error":null,"lastVerifiedAt":"2026-11-09T06:02:14.6970768+00:00","snapshotPublishedAt":"2026-11-06T18:17:57+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:crates.io","scope":"Complete OSV crates.io ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"crates.io-f6d341f4320a5a0c059c28102ee651c3dd06abc87b84d2bafa4e2a823ec07d35","complete":true,"records":3056,"lastAttemptAt":"2026-11-09T06:02:15.5284383+00:00","lastSuccessAt":"2026-11-09T05:02:23.1539412+00:00","error":null,"lastVerifiedAt":"2026-11-09T06:02:15.5284383+00:00","snapshotPublishedAt":"2026-11-09T04:47:48+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:npm","scope":"Complete OSV npm ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"npm-6a1c845b1938b1aa788f0e95c9ac8a8d5a1f07caed5d155840b0616b548c1455","complete":true,"records":231296,"lastAttemptAt":"2026-11-09T06:02:15.4064738+00:00","lastSuccessAt":"2026-11-09T04:03:49.859595+00:00","error":null,"lastVerifiedAt":"2026-11-09T06:02:15.4064738+00:00","snapshotPublishedAt":"2026-11-09T03:33:06+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null}]}