{"id":"GO-2026-6770","revision":null,"records":[{"revision":"2a5d5a0f7781435da154a2e1b2812758","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-94603","aliases":[],"title":"Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation","description":"Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL, allowing image-controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions 5.8.8 and 6.1.3.","state":0,"publishedAt":"2026-10-13T16:51:38.731+00:00","modifiedAt":"2026-10-13T20:21:43.627+00:00","affected":[{"ecosystem":"Vendor product","name":"podman","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"podman-container-tools\",\n                    \"product\": \"podman\",\n                    \"versions\": [\n                        {\n                            \"version\": \">= 4.4.0, < 5.8.8\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \">= 6.0.0, < 6.1.3\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","score":10,"severity":"CRITICAL"}],"references":["https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g","https://github.com/podman-container-tools/podman/commit/24706290d5c974f078d8ca284026802515f28e92","https://github.com/podman-container-tools/podman/commit/3721ff82ffb44a4ceeaecc5abd3808e924a6b669","https://github.com/podman-container-tools/podman/commit/450c64426dbcff1097d3c7911d791101e3d16f4c","https://github.com/podman-container-tools/podman/commit/7728ba0a90094408ad9078e36c3622a651d49616","https://github.com/podman-container-tools/podman/commit/c74b1d37b3fb834b0de43e176565d9d8c254b627","https://github.com/podman-container-tools/podman/commit/ea9243e04d1db3886dc3a51ee3300ffb547cfc02","https://github.com/podman-container-tools/podman/releases/tag/v5.8.8","https://github.com/podman-container-tools/podman/releases/tag/v6.1.3"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-94603","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-94603","identifiers":["CVE-2026-94603"]},"retained":false,"historicalAffected":[]},{"revision":"c85684cbc19b4721be7fa568f334004b","observedAt":"2026-11-07T15:26:39.865+00:00","statement":{"source":"euvd","id":"EUVD-2026-98929","aliases":["CVE-2026-94603","GHSA-2cvf-wqm6-wr9g"],"title":"Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied con…","description":"Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL, allowing image-controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions 5.8.8 and 6.1.3.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","score":10,"severity":null}],"references":["https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g","https://github.com/podman-container-tools/podman/commit/24706290d5c974f078d8ca284026802515f28e92","https://github.com/podman-container-tools/podman/commit/3721ff82ffb44a4ceeaecc5abd3808e924a6b669","https://github.com/podman-container-tools/podman/commit/450c64426dbcff1097d3c7911d791101e3d16f4c","https://github.com/podman-container-tools/podman/commit/7728ba0a90094408ad9078e36c3622a651d49616","https://github.com/podman-container-tools/podman/commit/c74b1d37b3fb834b0de43e176565d9d8c254b627","https://github.com/podman-container-tools/podman/commit/ea9243e04d1db3886dc3a51ee3300ffb547cfc02","https://github.com/podman-container-tools/podman/releases/tag/v5.8.8","https://github.com/podman-container-tools/podman/releases/tag/v6.1.3"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98929","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Oct 13, 2026, 4:51:38 PM","dateUpdated":"Oct 13, 2026, 8:21:43 PM"},"relatedAdvisories":[{"id":"RHSA-2026:74861","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","vulnerabilityIds":["CVE-2026-56851","CVE-2026-79705","CVE-2026-94603"]},{"id":"RHSA-2026:88202","title":"Red Hat Security Advisory: podman security update","vulnerabilityIds":["CVE-2026-94603"]},{"id":"openSUSE-SU-2026:12370-1","title":"podman-6.1.4-1.1 on GA media","vulnerabilityIds":["CVE-2026-107935","CVE-2026-94603"]},{"id":"RHSA-2026:74178","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","vulnerabilityIds":["CVE-2026-94603"]},{"id":"msrc_CVE-2026-94603","title":"Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation","vulnerabilityIds":["CVE-2026-94603"]},{"id":"RHSA-2026:79546","title":"Red Hat Security Advisory: Red Hat Quay 3.12.23","vulnerabilityIds":["CVE-2026-17106","CVE-2026-49825","CVE-2026-54770","CVE-2026-59879","CVE-2026-77403","CVE-2026-77404","CVE-2026-77406","CVE-2026-77409","CVE-2026-77410","CVE-2026-77412","CVE-2026-79921","CVE-2026-82417","CVE-2026-87776","CVE-2026-94603"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-98929","identifiers":["EUVD-2026-98929","CVE-2026-94603","GHSA-2cvf-wqm6-wr9g"]},"retained":false,"historicalAffected":[]},{"revision":"f1f72d28bb8b4eba8b8de084947e41d7","observedAt":"2026-10-25T16:19:28.255+00:00","statement":{"source":"nvd","id":"CVE-2026-94603","aliases":[],"title":"Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied con…","description":"Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL, allowing image-controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions 5.8.8 and 6.1.3.","state":0,"publishedAt":"2026-10-13T17:17:49.123+00:00","modifiedAt":"2026-10-16T16:00:33.533+00:00","affected":[],"metrics":[{"system":"CVSS 3.1 · security-advisories@github.com · Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","score":10,"severity":"CRITICAL"}],"references":["https://github.com/podman-container-tools/podman/commit/24706290d5c974f078d8ca284026802515f28e92","https://github.com/podman-container-tools/podman/commit/3721ff82ffb44a4ceeaecc5abd3808e924a6b669","https://github.com/podman-container-tools/podman/commit/450c64426dbcff1097d3c7911d791101e3d16f4c","https://github.com/podman-container-tools/podman/commit/7728ba0a90094408ad9078e36c3622a651d49616","https://github.com/podman-container-tools/podman/commit/c74b1d37b3fb834b0de43e176565d9d8c254b627","https://github.com/podman-container-tools/podman/commit/ea9243e04d1db3886dc3a51ee3300ffb547cfc02","https://github.com/podman-container-tools/podman/releases/tag/v5.8.8","https://github.com/podman-container-tools/podman/releases/tag/v6.1.3","https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-94603","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Awaiting Analysis","weaknesses":["CWE-693"],"productCriteria":[],"sourceDates":{"published":"2026-10-13T17:17:49.123","lastModified":"2026-10-16T16:00:33.533"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2026-94603","identifiers":["CVE-2026-94603"]},"retained":false,"historicalAffected":[]},{"revision":"7356b6044d034efabc3e418231021f5d","observedAt":"2026-11-03T16:59:10.846+00:00","statement":{"source":"osv","id":"GHSA-2cvf-wqm6-wr9g","aliases":["CVE-2026-94603","GO-2026-6770"],"title":"Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation","description":"### Impact\nPodman v4.4.0 added a feature where container checkpoints (from the `podman container checkpoint` command) could be distributed via OCI registry, and pulled from that registry and run via the `podman run` command. This allowed easy transfer of checkpoints between systems. However, checkpoints allow complete control of how the container is created - including full control of the container sandbox. When `podman run` detects a checkpoint, it will silently ignore all user input regarding how the container should be created - for example, `podman run --cap-drop=ALL` on an image that is determined to be a checkpoint will ignore `--cap-drop=all` and use the set of capabilities specified by the checkpoint image instead, which could include all capabilities. Podman identifies checkpoint images by looking for an annotation, `io.podman.annotations.checkpoint.runtime.name`. If this annotation is set, the image is treated as a checkpoint. Conflating container images and checkpoints in `podman run` allows inherently insecure behavior as the image can now control how it is executed. The Podman Maintainers have determined that the safest course of action is to remove this functionality.\n\n### Patch\nThe commit introducing this functionality was reverted.\n\n3721ff82ffb44a4ceeaecc5abd3808e924a6b669 c74b1d37b3fb834b0de43e176565d9d8c254b627 fa6cef22c2baf3987b581c673bb416ef0585daf7 (main)\nea9243e04d1db3886dc3a51ee3300ffb547cfc02 450c64426dbcff1097d3c7911d791101e3d16f4c 2d05a7c61f022d4f24980ea6d307fa53da2b8692 (v6.1)\n7728ba0a90094408ad9078e36c3622a651d49616 24706290d5c974f078d8ca284026802515f28e92 29c8c6e50607df7a7d735ace09ff0ea099c0b3e0 (v5.8)\n\n### Workarounds\nImages being pulled should be scanned for the `io.podman.annotations.checkpoint.runtime.name` annotation, and rejected if it is present. Podman does not presently have the ability to perform this scanning and rejection automatically.\n\nAlso not that rootless containers are not affected as they do not support checkpoint/restore at all currently.\n\n### Credits\nThis vulnerability was discovered by ADA Logics Ltd using Anthropic's Claude models.","state":0,"publishedAt":"2026-10-15T20:22:16+00:00","modifiedAt":"2026-11-03T16:00:03.3867011+00:00","affected":[{"ecosystem":"Go","name":"github.com/containers/podman/v4","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"4.4.0"},{"kind":"fixed","version":"5.8.8"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"go.podman.io/podman/v6","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"6.0.0"},{"kind":"fixed","version":"6.1.3"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/containers/podman/v5","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"4.4.0"},{"kind":"fixed","version":"5.8.8"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"CRITICAL"}],"references":["https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g","https://nvd.nist.gov/vuln/detail/CVE-2026-94603","https://github.com/podman-container-tools/podman/commit/24706290d5c974f078d8ca284026802515f28e92","https://github.com/podman-container-tools/podman/commit/3721ff82ffb44a4ceeaecc5abd3808e924a6b669","https://github.com/podman-container-tools/podman/commit/450c64426dbcff1097d3c7911d791101e3d16f4c","https://github.com/podman-container-tools/podman/commit/7728ba0a90094408ad9078e36c3622a651d49616","https://github.com/podman-container-tools/podman/commit/c74b1d37b3fb834b0de43e176565d9d8c254b627","https://github.com/podman-container-tools/podman/commit/ea9243e04d1db3886dc3a51ee3300ffb547cfc02","https://github.com/podman-container-tools/podman","https://github.com/podman-container-tools/podman/releases/tag/v5.8.8","https://github.com/podman-container-tools/podman/releases/tag/v6.1.3"],"sourceUrl":"https://github.com/advisories/GHSA-2cvf-wqm6-wr9g","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-2cvf-wqm6-wr9g","identifiers":["GHSA-2cvf-wqm6-wr9g","CVE-2026-94603","GO-2026-6770"]},"retained":false,"historicalAffected":[]},{"revision":"30804cd529e640c98600dff46e35115b","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-6770","aliases":["CVE-2026-94603","GHSA-2cvf-wqm6-wr9g"],"title":"Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation in github.com/containers/podman","description":"Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation in github.com/containers/podman","state":0,"publishedAt":"2026-10-19T21:08:35+00:00","modifiedAt":"2026-10-19T21:31:50.5706571+00:00","affected":[{"ecosystem":"Go","name":"github.com/containers/podman","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/containers/podman/v2","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/containers/podman/v3","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/containers/podman/v4","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"4.4.0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/containers/podman/v5","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"5.8.8"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"go.podman.io/podman/v6","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"6.0.0"},{"kind":"fixed","version":"6.1.3"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g","https://nvd.nist.gov/vuln/detail/CVE-2026-94603","https://github.com/podman-container-tools/podman/commit/24706290d5c974f078d8ca284026802515f28e92","https://github.com/podman-container-tools/podman/commit/3721ff82ffb44a4ceeaecc5abd3808e924a6b669","https://github.com/podman-container-tools/podman/commit/450c64426dbcff1097d3c7911d791101e3d16f4c","https://github.com/podman-container-tools/podman/commit/7728ba0a90094408ad9078e36c3622a651d49616","https://github.com/podman-container-tools/podman/commit/c74b1d37b3fb834b0de43e176565d9d8c254b627","https://github.com/podman-container-tools/podman/commit/ea9243e04d1db3886dc3a51ee3300ffb547cfc02","https://github.com/podman-container-tools/podman/releases/tag/v5.8.8","https://github.com/podman-container-tools/podman/releases/tag/v6.1.3"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6770","license":"OSV · upstream source license applies","key":"osv:GO-2026-6770","identifiers":["GO-2026-6770","CVE-2026-94603","GHSA-2cvf-wqm6-wr9g"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-11-08T14:04:21.6524616+00:00","complete":true,"records":1769,"lastAttemptAt":"2026-11-08T14:04:21.6524616+00:00","lastSuccessAt":"2026-11-08T14:04:21.8442875+00:00","error":null,"lastVerifiedAt":"2026-11-08T14:04:21.8442884+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-eaa64dac63caa79c8d4905619258c41c51b39e461b996124e1a21b5e85e7e738-4b0775bb0fc73c3ceeed66f8f17640894d61d654f97ee9386046b283ad9f9876","complete":true,"records":421100,"lastAttemptAt":"2026-11-08T14:04:21.1432513+00:00","lastSuccessAt":"2026-11-08T14:04:21.1228768+00:00","error":null,"lastVerifiedAt":"2026-11-08T14:04:21.1432513+00:00","snapshotPublishedAt":"2026-11-08T13:27:32+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"euvd","scope":"Rolling EUVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global EUVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-383c643166b94ac4b6a615647191978e","complete":true,"records":13654,"lastAttemptAt":"2026-11-08T14:04:47.6384375+00:00","lastSuccessAt":"2026-11-08T13:04:50.073+00:00","error":null,"lastVerifiedAt":"2026-11-08T13:04:50.073+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13706,"expectedIdentifiers":13706,"failedIdentifiers":0},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-11-08T14:04:21.6524616+00:00","complete":true,"records":1096,"lastAttemptAt":"2026-11-08T14:04:21.6524616+00:00","lastSuccessAt":"2026-11-08T14:04:21.8452187+00:00","error":null,"lastVerifiedAt":"2026-11-08T14:04:21.8452194+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"nvd","scope":"Rolling NVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global NVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-ceefbd28b79c4b75ac56c9c678246411","complete":false,"records":13666,"lastAttemptAt":"2026-11-08T14:04:46.9956646+00:00","lastSuccessAt":"2026-11-08T14:04:46.992+00:00","error":null,"lastVerifiedAt":"2026-11-08T14:04:46.992+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13185,"expectedIdentifiers":13706,"failedIdentifiers":0},{"source":"osv:Go","scope":"Complete OSV Go ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"go-980593e6977a6d1b4fb1eed5a1ffe88a468736f89f0a06f710924ad59132c023","complete":true,"records":9914,"lastAttemptAt":"2026-11-08T14:04:21.5047325+00:00","lastSuccessAt":"2026-11-08T11:07:07.068788+00:00","error":null,"lastVerifiedAt":"2026-11-08T14:04:21.5047325+00:00","snapshotPublishedAt":"2026-11-08T11:02:46+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-fde804134ecdda0ddd5ff5c26ee1fff5a6fa659311f7ef2e51c6ad54964db0e2","complete":true,"records":1971,"lastAttemptAt":"2026-11-08T14:04:21.2941446+00:00","lastSuccessAt":"2026-11-06T19:03:17.0399903+00:00","error":null,"lastVerifiedAt":"2026-11-08T14:04:21.2941446+00:00","snapshotPublishedAt":"2026-11-06T18:17:57+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:crates.io","scope":"Complete OSV crates.io ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"crates.io-964c14035e6f0f6478b2870fad6a7ef9f6045876d4a12af2c2e514521e54b6af","complete":true,"records":3055,"lastAttemptAt":"2026-11-08T14:04:21.6167179+00:00","lastSuccessAt":"2026-11-08T11:07:12.1927025+00:00","error":null,"lastVerifiedAt":"2026-11-08T14:04:21.6167179+00:00","snapshotPublishedAt":"2026-11-08T11:02:46+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:npm","scope":"Complete OSV npm ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"npm-f8647d7ba64b1ba0dfdc7130944766d5b36d5b77d18fff0c79e651a4cff3c2b9","complete":true,"records":231293,"lastAttemptAt":"2026-11-08T14:04:21.3943214+00:00","lastSuccessAt":"2026-11-08T11:06:56.2918717+00:00","error":null,"lastVerifiedAt":"2026-11-08T14:04:21.3943214+00:00","snapshotPublishedAt":"2026-11-08T11:02:50+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null}]}