{"id":"CVE-2017-1000433","aliases":["DEBIAN-CVE-2017-1000433","DLA-1410-1","DLA-2577-1","EUVD-2018-0126","GHSA-924m-4pmx-c67h","PYSEC-2018-48","SUSE-SU-2018:1194-1","SUSE-SU-2019:1450-1","UBUNTU-CVE-2017-1000433","USN-3520-1"],"status":"published","title":"pysaml2 Improper Authentication vulnerability","description":"pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user without knowing their password.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02553,"percentile":0.85163,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-287"],"published":"2018-01-02T00:00:00Z","modified":"2026-10-24T10:49:26Z","fixes":[{"ecosystem":"PyPI","package":"pysaml2","fixed_in":["4.5.0"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"python-pysaml2","fixed_in":["4.5.0-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"python-pysaml2","fixed_in":["4.5.0-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"python-pysaml2","fixed_in":["4.5.0-2"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"python-pysaml2","fixed_in":["2.0.0-1+deb8u2"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"python-pysaml2","fixed_in":["4.0.2-3.3.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"python-pysaml2","fixed_in":["3.0.0-3ubuntu1.16.04.3"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"pysaml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"python-pysaml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"python-pysaml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"python-pysaml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-2"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"python-pysaml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-1+deb8u2"}]}],"versions":["2.0.0-1","2.0.0-1+deb8u1"]},{"source":"osv","ecosystem":"Debian:9","package":"python-pysaml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-5+deb9u2"}]}],"versions":["3.0.0-5","3.0.0-5+deb9u1"],"bundled":2},{"source":"osv","ecosystem":"PyPI","package":"pysaml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0"}]}],"versions":["0.4.3","1.0.1","1.0.2","1.0.3","1.1.0","2.0.0","2.1.0","2.2.0","2.3.0","2.4.0","3.0.0","3.0.2","4.0.0","4.0.1","4.0.2","4.0.3","4.0.4","4.0.5","4.0.5rc1","4.1.0","4.2.0","4.3.0","4.4.0"]},{"source":"osv","ecosystem":"PyPI","package":"pysaml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0"}]}],"versions":["0.4.3","1.0.1","1.0.2","1.0.3","1.1.0","2.0.0","2.1.0","2.2.0","2.3.0","2.4.0","3.0.0","3.0.2","4.0.0","4.0.1","4.0.2","4.0.3","4.0.4","4.0.5","4.0.5rc1","4.1.0","4.2.0","4.3.0","4.4.0"]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"python-pysaml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-3.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"caasp-openstack-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0+git.1553079189.3bf8922-1.6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"crowbar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0+git.1551088848.823bcaa3-7.29.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"crowbar-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0+git.1556285635.ab602dd4d-9.46.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"crowbar-ha","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0+git.1556181005.47c643d-4.46.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"crowbar-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0+git.1554887450.ff7c30c1c-9.51.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"galera-python-clustercheck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0+git.1506329536.8f5878c-1.6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"openstack-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1~dev4-4.15.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"openstack-ceilometer-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1~dev4-4.15.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"openstack-heat-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev1-2.6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"python-PyKMIP","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-3.3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"python-pysaml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-3.6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"rubygem-crowbar-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-7.14.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"crowbar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0+git.1551088848.823bcaa3-7.29.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"crowbar-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0+git.1556285635.ab602dd4d-9.46.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"rubygem-crowbar-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-7.14.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"python-pysaml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-3ubuntu1.16.04.3"}]}],"versions":["2.4.0-0ubuntu2","3.0.0-3ubuntu1","3.0.0-3ubuntu1.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"python-pysaml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-3ubuntu1.16.04.3"}]}],"versions":["2.4.0-0ubuntu2","3.0.0-3ubuntu1","3.0.0-3ubuntu1.16.04.1"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"pysaml2_project","product":"pysaml2"}],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00000.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://github.com/rohe/pysaml2/issues/451","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","VDB Entry","fix","web","report"]},{"url":"https://security.gentoo.org/glsa/201801-11","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Issue Tracking","Third Party Advisory","report","web","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/02/msg00038.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000433","tags":["advisory"]},{"url":"https://github.com/IdentityPython/pysaml2/pull/454","tags":["web"]},{"url":"https://github.com/IdentityPython/pysaml2/commit/6312a41e037954850867f29d329e5007df1424a5","tags":["web"]},{"url":"https://github.com/advisories/GHSA-924m-4pmx-c67h","tags":["advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/pysaml2/PYSEC-2018-48.yaml","tags":["web"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-1000433","tags":["advisory"]},{"url":"https://github.com/rohe/pysaml2","tags":["package"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181194-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1074662","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000433","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191450-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1063535","tags":["report"]},{"url":"https://bugzilla.suse.com/1112767","tags":["report"]},{"url":"https://bugzilla.suse.com/1113107","tags":["report"]},{"url":"https://bugzilla.suse.com/1118004","tags":["report"]},{"url":"https://bugzilla.suse.com/1120767","tags":["report"]},{"url":"https://bugzilla.suse.com/1122053","tags":["report"]},{"url":"https://bugzilla.suse.com/1122875","tags":["report"]},{"url":"https://bugzilla.suse.com/1123709","tags":["report"]},{"url":"https://bugzilla.suse.com/1127558","tags":["report"]},{"url":"https://bugzilla.suse.com/1127752","tags":["report"]},{"url":"https://bugzilla.suse.com/1128954","tags":["report"]},{"url":"https://bugzilla.suse.com/1128987","tags":["report"]},{"url":"https://bugzilla.suse.com/1130414","tags":["report"]},{"url":"https://bugzilla.suse.com/1131053","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000872","tags":["web"]},{"url":"https://bugzilla.suse.com/SCRD-2813","tags":["report"]},{"url":"https://bugzilla.suse.com/SCRD-7126","tags":["report"]},{"url":"https://bugzilla.suse.com/SCRD-8462","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-1000433","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3520-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-1000433","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-1000433","description":"pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user without knowing their password.","status":"published","published":"2018-01-02T23:00:00Z","modified":"2024-08-05T22:00:41.084Z","updated_at":"2026-11-02T14:33:21.142987Z"}],"euvd":[{"id":"EUVD-2018-0126","description":"pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user without knowing their password.","status":"published","published":"2018-01-02T23:00:00Z","modified":"2024-08-05T22:00:41Z","updated_at":"2026-11-03T02:23:03.159581Z"}],"ghsa":[{"id":"GHSA-924m-4pmx-c67h","title":"pysaml2 Improper Authentication vulnerability","description":"pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user without knowing their password.","status":"published","published":"2018-07-13T16:01:17Z","modified":"2024-10-21T21:09:06Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:38:12.325695Z"}],"nvd":[{"id":"CVE-2017-1000433","description":"pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user without knowing their password.","status":"published","published":"2018-01-02T23:29:00.337Z","modified":"2026-06-17T00:59:10.227Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:04:12.690425Z"}],"osv":[{"id":"CVE-2017-1000433","description":"pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user without knowing their password.","status":"published","published":"2018-01-02T23:29:00.337Z","modified":"2026-10-24T10:49:26.706128616Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:03.851821Z"},{"id":"DEBIAN-CVE-2017-1000433","description":"pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user without knowing their password.","status":"published","published":"2018-01-02T23:29:00.337Z","modified":"2026-09-01T20:03:40.987127981Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:28.207321Z"},{"id":"GHSA-924m-4pmx-c67h","title":"pysaml2 Improper Authentication vulnerability","description":"pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user without knowing their password.","status":"published","published":"2018-07-13T16:01:17Z","modified":"2024-10-21T21:25:30.520963Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T15:46:43.123867Z"},{"id":"UBUNTU-CVE-2017-1000433","description":"pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user without knowing their password.","status":"published","published":"2018-01-02T00:00:00Z","modified":"2026-02-04T02:41:22.483889Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:13.729565Z"},{"id":"DLA-1410-1","title":"python-pysaml2 - security update","status":"published","published":"2018-07-01T00:00:00Z","modified":"2026-03-09T01:01:57.65493Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DLA-2577-1","title":"python-pysaml2 - security update","status":"published","published":"2021-02-26T00:00:00Z","modified":"2026-03-09T01:22:35.217207Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"PYSEC-2018-48","description":"pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user without knowing their password.","status":"published","published":"2018-01-02T23:29:00Z","modified":"2023-11-08T03:58:46.488294Z","updated_at":"2026-11-02T15:52:52.192131Z"},{"id":"SUSE-SU-2018:1194-1","title":"Security update for python-pysaml2","description":"This update for python-pysaml2 fixes the following issues:\n\n  - CVE-2017-1000433: When python optimizations are enabled, any user is able to login without knowing their password. (bsc#1074662)\n\n","status":"published","published":"2018-05-09T14:19:05Z","modified":"2026-02-04T04:11:50.633432Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2019:1450-1","title":"Security update for Cloud7 packages","description":"This update provides fixes for the following packages issues:\n\ncaasp-openstack-heat-templates:\n\n- Update to version 1.0+git.1553079189.3bf8922:\n  * SCRD-2813 Add support for CPI parameters\n- Update to version 1.0+git.1547562889.43707e7:\n  * Switch LB protocol from HTTP to HTTPS\n\ncrowbar:\n\n- Update to version 4.0+git.1551088848.823bcaa3:\n  * install-chef-suse: filter comments from  authorized_keys file\n\ncrowbar-core:\n\n- Update to version 4.0+git.1556285635.ab602dd4d:\n  * network: run wicked ifdown for interface cleanup (bsc#1063535)\n- Update to version 4.0+git.1554931881.d98412e0e:\n  * Fix cloud-mkcloud9-job-backup-restore (SCRD-7126)\n- Update to version 4.0+git.1552239940.5bc9aaac4:\n  * crowbar: Do not rely on Chef::Util::FileEdit to write the file (bsc#1127752)\n- Update to version 4.0+git.1550493400.9787ea9ad:\n  * upgrade: Delay status switch after upgrade ends\n- Update to version 4.0+git.1549474445.d9a35cf52:\n  * fix hound warning\n  * Support RAID 0\n- Packaged default upgrade timeouts file \n- Update to version 4.0+git.1549136953.afcde921f:\n  * apache2: enable sslsessioncache\n- Update to version 4.0+git.1548859099.0edbbfdc2:\n  * upgrade: Add default upgrade timeouts file\n\ncrowbar-ha:\n\n- Update to version 4.0+git.1556181005.47c643d:\n  * pacemaker: wait more for founder if SBD is configured (SCRD-8462)\n  * pacemaker: don't check cluster members on founder (SCRD-8462)\n- Update to version 4.0+git.1554215159.8a42a71:\n  * improve galera HA setup (bsc#1122875)\n\ncrowbar-openstack:\n\n- Update to version 4.0+git.1554887450.ff7c30c1c:\n  * neutron: Added option to use L3 HA with Keepalived\n- Update to version 4.0+git.1554843756.5622551da:\n  * ironic: Fix regression in helper\n- Update to version 4.0+git.1554814630.ec3c89f25:\n  * ceilometer: Install package which contains cron file (bsc#1130414)\n- Update to version 4.0+git.1551459192.89433e13b:\n  * rabbit: fix mirroring regex\n- Update to version 4.0+git.1550582615.f6b433ec7:\n  * ceilometer: Use pacemaker to handle expirer cron link (bsc#1113107)\n- Update to version 4.0+git.1550262335.9667fa580:\n  * mysql: Do not set a custom logfile for mysqld (bsc#1112767)\n  * mysql: create .my.cnf in root home directory for mysql cmdline\n- Update to version 4.0+git.1549986893.df836d6cc:\n  * mariadb: Remove installing the xtrabackup package\n  * ssl: Fix ACL setup in ssl_setup provider (bsc#1123709)\n  \ngalera-python-clustercheck:\n\n- readtimeout.patch: Add socket read timeout (bsc#1122053)\n\nopenstack-ceilometer:\n\n- Install openstack-ceilometer-expirer.cron into /usr/share/ceilometer\n  This is needed in a clustered environment where multiple\n  ceilometer-collector services are installed on different nodes\n  (and due to that multiple expirer cron jobs installed). That\n  can lead to deadlocks when the cron jobs run in parallel on\n  the different nodes (bsc#1113107)\n\nopenstack-heat-gbp:\n\n- switch to newton branch\n\npython-PyKMIP:\n\n- Fix a denial-of-service bug by setting the server socket timeout (bsc#1120767 CVE-2018-1000872) \n\npython-pysaml2:\n\n- Fix for the authentication bypass due to optimizations (CVE-2017-1000433, bsc#1074662)\n\nrubygem-crowbar-client:\n\n- Update to 3.9.0\n - Add support for the restricted APIs\n - Add --raw to 'proposal show' and 'proposal edit'\n - Correctly parse error messages that we don't handle natively\n - Better upgrade repocheck output\n- Update to 3.7.0\n  - upgrade: Use cloud_version config for upgrade\n  - ses: Add ses upload subcommand\n  - Add cloud_version config field.\n  - Wrap os-release file parsing for better reuse.\n  - upgrade: Fix repocheck component in error message\n  - upgrade: Better repocheck output\n- updated to version 3.6.1\n  * Hide the database step when it is not used (bsc#1118004)\n  * Fix help strings\n  * Describe how to upgrade more nodes with one command\n","status":"published","published":"2019-06-07T11:00:52Z","modified":"2026-02-04T03:49:12.104816Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"USN-3520-1","title":"python-pysaml2 vulnerability","description":"It was discovered that PySAML2 incorrectly accepted any password when run\nwith python optimizations enabled. An attacker could use this issue to\nauthenticate as any user without a valid password.\n","status":"published","published":"2018-01-08T16:19:37Z","modified":"2026-02-10T04:41:16Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}