{"id":"CVE-2018-16476","aliases":["DEBIAN-CVE-2018-16476","EUVD-2018-0818","GHSA-q2qw-rmrh-vv42","RHSA-2019:0600","SUSE-SU-2018:3996-1","SUSE-SU-2019:0152-1","UBUNTU-CVE-2018-16476","openSUSE-SU-2024:11322-1","openSUSE-SU-2024:11347-1"],"status":"published","title":"Improper Access Control in activejob","description":"A Broken Access Control vulnerability in Active Job versions \u003e= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been fixed in versions 4.2.11, 5.0.7.1, 5.1.6.1, and 5.2.1.1.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02865,"percentile":0.86871,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-284","CWE-502"],"published":"2018-11-30T19:00:00Z","modified":"2026-10-24T10:30:35Z","fixes":[{"ecosystem":"RubyGems","package":"activejob","fixed_in":["4.2.11","5.0.7.1","5.1.6.1","5.2.1.1"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"rails","fixed_in":["2:5.2.2+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"rails","fixed_in":["2:5.2.2+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"rails","fixed_in":["2:5.2.2+dfsg-1"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme","fixed_in":["0:5.9.9.1-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-amazon-smartstate","fixed_in":["0:5.9.9.1-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-appliance","fixed_in":["0:5.9.9.1-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-appliance-common","fixed_in":["0:5.9.9.1-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-appliance-debuginfo","fixed_in":["0:5.9.9.1-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-appliance-tools","fixed_in":["0:5.9.9.1-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-debuginfo","fixed_in":["0:5.9.9.1-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-gemset","fixed_in":["0:5.9.9.1-1.el7cf"],"sources":["osv"]},{"ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-gemset-debuginfo","fixed_in":["0:5.9.9.1-1.el7cf"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15","package":"rubygem-activejob-5_1","fixed_in":["5.1.4-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"rubygem-activejob-4_2","fixed_in":["4.2.9-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"rubygem-activejob-4_2","fixed_in":["4.2.9-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 4","package":"rubygem-activejob-4_2","fixed_in":["4.2.9-3.6.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"RubyGems","package":"activejob","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.0"},{"fixed":"4.2.11"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"activejob","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"last_affected":"5.0.7.0"},{"fixed":"5.0.7.1"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"activejob","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.0"},{"last_affected":"5.1.6.0"},{"fixed":"5.1.6.1"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"activejob","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0"},{"last_affected":"5.2.1.0"},{"fixed":"5.2.1.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:5.2.2+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:5.2.2+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:5.2.2+dfsg-1"}]}]},{"source":"osv","ecosystem":"RubyGems","package":"activejob","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.0"},{"fixed":"4.2.11"}]}],"versions":["4.2.0","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.10","4.2.10.rc1","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2"]},{"source":"osv","ecosystem":"RubyGems","package":"activejob","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.7.1"}]}],"versions":["5.0.0","5.0.0.1","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7"]},{"source":"osv","ecosystem":"RubyGems","package":"activejob","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.0"},{"fixed":"5.1.6.1"}]}],"versions":["5.1.0","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6"]},{"source":"osv","ecosystem":"RubyGems","package":"activejob","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0"},{"fixed":"5.2.1.1"}]}],"versions":["5.2.0","5.2.1","5.2.1.rc1"]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.9.1-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-amazon-smartstate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.9.1-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-appliance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.9.1-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-appliance-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.9.1-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-appliance-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.9.1-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-appliance-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.9.1-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.9.1-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-gemset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.9.1-1.el7cf"}]}]},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-gemset-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.9.1-1.el7cf"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15","package":"rubygem-activejob-5_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"rubygem-activejob-4_2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.9-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"rubygem-activejob-4_2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.9-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"rubygem-activejob-4_2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.9-3.6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:4.1.10-1","2:4.2.5-1","2:4.2.5.1-1","2:4.2.5.2-2","2:4.2.6-1","2:4.2.6-1ubuntu0.1~esm1","2:4.2.6-1ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:4.2.9-2","2:4.2.9-4","2:4.2.10-0ubuntu4","2:4.2.10-0ubuntu4+esm1","2:4.2.10-0ubuntu4+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:5.2.2.1+dfsg-1ubuntu1","2:5.2.3+dfsg-3","2:5.2.3+dfsg-3ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:6.0.3.7+dfsg-2","2:6.1.4.1+dfsg-8ubuntu2","2:6.1.4.1+dfsg-8ubuntu2+esm1"]}],"products":[{"vendor":"rails","product":"https://github.com/rails/rails"},{"vendor":"redhat","product":"cloudforms"},{"vendor":"rubyonrails","product":"rails"}],"references":[{"url":"https://groups.google.com/d/msg/rubyonrails-security/FL4dSdzr2zw/zjKVhF4qBAAJ","tags":["x_refsource_MISC","x_transferred","Exploit","Mailing List","Mitigation","Third Party Advisory","evidence","web"]},{"url":"https://weblog.rubyonrails.org/2018/11/27/Rails-4-2-5-0-5-1-5-2-have-been-released/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0600","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16476","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activejob/CVE-2018-16476.yml","tags":["web"]},{"url":"https://groups.google.com/forum/#!topic/rubyonrails-security/FL4dSdzr2zw","tags":["web"]},{"url":"https://github.com/rails/rails/commit/970b0d754be7c71a760d9b807eea32297fd838e3","tags":["web"]},{"url":"https://github.com/advisories/GHSA-q2qw-rmrh-vv42"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-16476","tags":["advisory"]},{"url":"https://github.com/rails/rails","tags":["package"]},{"url":"https://weblog.rubyonrails.org/2018/11/27/Rails-4-2-5-0-5-1-5-2-have-been-released","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_cloudforms/4.6/html/release_notes","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1659223","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1668730","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1669583","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1680960","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1683468","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1684196","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0600.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16476","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16476","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183996-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1117632","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16476","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190152-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-16476","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2018/11/27/4","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16477","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-16476","description":"A Broken Access Control vulnerability in Active Job versions \u003e= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been fixed in versions 4.2.11, 5.0.7.1, 5.1.6.1, and 5.2.1.1.","status":"published","published":"2018-11-30T19:00:00Z","modified":"2024-08-05T10:24:32.802Z","cwes":["CWE-284"],"updated_at":"2026-11-02T14:35:11.426178Z"}],"euvd":[{"id":"EUVD-2018-0818","description":"A Broken Access Control vulnerability in Active Job versions \u003e= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been fixed in versions 4.2.11, 5.0.7.1, 5.1.6.1, and 5.2.1.1.","status":"published","published":"2018-11-30T19:00:00Z","modified":"2024-08-05T10:24:32Z","updated_at":"2026-11-03T02:39:41.750379Z"}],"ghsa":[{"id":"GHSA-q2qw-rmrh-vv42","title":"Improper Access Control in activejob","description":"A Broken Access Control vulnerability in Active Job versions \u003e= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have.","status":"published","published":"2018-12-05T17:24:27Z","modified":"2023-11-12T05:00:22Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-284","CWE-502"],"updated_at":"2026-11-02T14:37:21.209096Z"}],"nvd":[{"id":"CVE-2018-16476","description":"A Broken Access Control vulnerability in Active Job versions \u003e= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been fixed in versions 4.2.11, 5.0.7.1, 5.1.6.1, and 5.2.1.1.","status":"published","published":"2018-11-30T19:29:00.22Z","modified":"2026-06-17T01:44:21.637Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-284","CWE-502"],"updated_at":"2026-11-02T14:04:49.995593Z"}],"osv":[{"id":"CVE-2018-16476","description":"A Broken Access Control vulnerability in Active Job versions \u003e= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been fixed in versions 4.2.11, 5.0.7.1, 5.1.6.1, and 5.2.1.1.","status":"published","published":"2018-11-30T19:29:00.22Z","modified":"2026-10-24T10:30:35.656370393Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:08.533609Z"},{"id":"DEBIAN-CVE-2018-16476","description":"A Broken Access Control vulnerability in Active Job versions \u003e= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been fixed in versions 4.2.11, 5.0.7.1, 5.1.6.1, and 5.2.1.1.","status":"published","published":"2018-11-30T19:29:00.22Z","modified":"2026-10-23T18:03:00.445823089Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:30.290351Z"},{"id":"GHSA-q2qw-rmrh-vv42","title":"Improper Access Control in activejob","description":"A Broken Access Control vulnerability in Active Job versions \u003e= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have.","status":"published","published":"2018-12-05T17:24:27Z","modified":"2024-02-17T05:33:12.879561Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-284","CWE-502"],"updated_at":"2026-11-02T15:46:54.055966Z"},{"id":"RHSA-2019:0600","title":"Red Hat Security Advisory: CloudForms 4.6.9 security, bug fix and enhancement update","status":"published","published":"2024-09-16T02:12:14Z","modified":"2026-06-27T10:07:03Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"UBUNTU-CVE-2018-16476","description":"A Broken Access Control vulnerability in Active Job versions \u003e= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been fixed in versions 4.2.11, 5.0.7.1, 5.1.6.1, and 5.2.1.1.","status":"published","published":"2018-11-30T19:29:00Z","modified":"2025-10-24T04:47:11Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:17.496046Z"},{"id":"openSUSE-SU-2024:11322-1","title":"ruby2.7-rubygem-activejob-5.2-5.2.6-1.2 on GA media","description":"These are all security issues fixed in the ruby2.7-rubygem-activejob-5.2-5.2.6-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:40:01.874905Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:11347-1","title":"ruby2.7-rubygem-rails-5.2-5.2.6-1.2 on GA media","description":"These are all security issues fixed in the ruby2.7-rubygem-rails-5.2-5.2.6-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:33:45.660789Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2018:3996-1","title":"Security update for rubygem-activejob-5_1","description":"This update for rubygem-activejob-5_1 fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-16476: Fixed broken access control vulnerability (bsc#1117632).\n","status":"published","published":"2018-12-06T08:40:08Z","modified":"2026-02-04T04:04:55.535944Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2019:0152-1","title":"Security update for rubygem-activejob-4_2","description":"This update for rubygem-activejob-4_2 fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-16476: Fixed broken access control vulnerability (bsc#1117632).\n","status":"published","published":"2019-01-24T09:28:44Z","modified":"2026-02-04T04:25:18.708707Z","updated_at":"2026-11-02T15:53:45.926331Z"}]}}