{"id":"CVE-2020-14928","aliases":["ALSA-2020:4649","DEBIAN-CVE-2020-14928","DLA-2281-1","DSA-4725-1","EUVD-2020-7064","GHSA-3rg7-72j5-5xpv","MGASA-2020-0351","OESA-2022-1785","RHSA-2020:4649","RLSA-2020:4649","SUSE-SU-2021:0885-1","SUSE-SU-2021:0891-1","SUSE-SU-2021:0949-1","UBUNTU-CVE-2020-14928","USN-4429-1","openSUSE-SU-2021:0482-1","openSUSE-SU-2024:10744-1"],"status":"published","title":"evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and...","description":"evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a \"begin TLS\" response, eds reads additional data and evaluates it in a TLS context, aka \"response injection.\"","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02607,"percentile":0.855,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-74"],"published":"2020-07-08T00:00:00Z","modified":"2026-10-29T11:00:14Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"bogofilter","fixed_in":["1.2.5-2.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"evolution-data-server-doc","fixed_in":["3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"evolution-data-server-perl","fixed_in":["3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"evolution-data-server-tests","fixed_in":["3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"evolution-devel","fixed_in":["3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"evolution-data-server","fixed_in":["3.36.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"evolution-data-server","fixed_in":["3.36.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"evolution-data-server","fixed_in":["3.36.4-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"evolution-data-server","fixed_in":["3.22.7-1+deb9u1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"evolution-data-server","fixed_in":["3.30.5-1+deb10u1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"evolution-data-server","fixed_in":["3.30.1-5.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"evolution-data-server","fixed_in":["3.30.1-5.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bogofilter","fixed_in":["0:1.2.5-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bogofilter-debuginfo","fixed_in":["0:1.2.5-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bogofilter-debugsource","fixed_in":["0:1.2.5-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-bogofilter","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-bogofilter-debuginfo","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-data-server","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-data-server-debuginfo","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-data-server-debugsource","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-data-server-devel","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-data-server-langpacks","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-data-server-tests-debuginfo","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-debuginfo","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-debugsource","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-help","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-langpacks","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-mapi","fixed_in":["0:3.28.3-3.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-mapi-debuginfo","fixed_in":["0:3.28.3-3.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-mapi-debugsource","fixed_in":["0:3.28.3-3.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-mapi-langpacks","fixed_in":["0:3.28.3-3.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-pst","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-pst-debuginfo","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-spamassassin","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-spamassassin-debuginfo","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openchange","fixed_in":["0:2.3-26.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openchange-client-debuginfo","fixed_in":["0:2.3-26.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openchange-debuginfo","fixed_in":["0:2.3-26.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openchange-debugsource","fixed_in":["0:2.3-26.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-bogofilter-debuginfo","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-data-server-debuginfo","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-data-server-debugsource","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-data-server-doc","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-data-server-perl","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-data-server-tests","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-data-server-tests-debuginfo","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-debuginfo","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-debugsource","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-devel","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-pst-debuginfo","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-spamassassin-debuginfo","fixed_in":["0:3.28.5-14.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"bogofilter","fixed_in":["0:1.2.5-2.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"evolution-mapi","fixed_in":["0:3.28.3-3.el8"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"evolution-data-server","fixed_in":["3.18.5-1ubuntu1.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"evolution-data-server","fixed_in":["3.28.5-0ubuntu0.18.04.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"evolution-data-server","fixed_in":["3.36.3-0ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"bogofilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-2.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"evolution-data-server-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"evolution-data-server-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"evolution-data-server-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"evolution-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.36.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.36.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.36.4-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22.7-1+deb9u1"}]}],"versions":["3.22.7-1"]},{"source":"osv","ecosystem":"Debian:10","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.30.5-1+deb10u1"}]}],"versions":["3.30.5-1"]},{"source":"osv","ecosystem":"Mageia:7","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.32.2-1.2.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.30.1-5.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.30.1-5.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bogofilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.5-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bogofilter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.5-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bogofilter-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.5-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-bogofilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-bogofilter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-data-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-data-server-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-data-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-data-server-langpacks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-data-server-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-help","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-langpacks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-mapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-3.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-mapi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-3.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-mapi-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-3.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-mapi-langpacks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-3.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-pst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-pst-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-spamassassin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openchange","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3-26.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openchange-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3-26.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openchange-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3-26.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openchange-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3-26.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-bogofilter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-data-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-data-server-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-data-server-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-data-server-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-data-server-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-data-server-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-pst-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-spamassassin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-14.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"bogofilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.5-2.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"evolution-mapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-3.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.6-17.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22.7-18.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22.7-18.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP2","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.34.4-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP2","package":"evolution-ews","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.34.4-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18.5-1ubuntu1.3"}]}],"versions":["3.16.5-1ubuntu3","3.18.1-1ubuntu1","3.18.2-0ubuntu1","3.18.2-0ubuntu2","3.18.3-1ubuntu1","3.18.3-1ubuntu2","3.18.4-0ubuntu1","3.18.5-1ubuntu1","3.18.5-1ubuntu1.1","3.18.5-1ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.5-0ubuntu0.18.04.3"}]}],"versions":["3.26.1-1ubuntu1","3.26.2-1ubuntu1","3.26.2.1-1ubuntu1","3.26.2.1-1ubuntu3","3.26.3-1ubuntu1","3.26.5-1ubuntu3","3.27.90-1ubuntu1","3.28.0-1ubuntu1","3.28.0-2ubuntu1","3.28.0-2ubuntu2","3.28.1-1ubuntu1","3.28.3-0ubuntu0.18.04.1","3.28.5-0ubuntu0.18.04.1","3.28.5-0ubuntu0.18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.36.3-0ubuntu1.1"}]}],"versions":["3.34.1-1","3.34.1-1build1","3.34.1-1ubuntu1","3.34.1-2","3.34.3-2","3.35.91-1","3.35.92-1","3.36.0-1","3.36.1-1","3.36.1-2","3.36.2-0ubuntu1","3.36.3-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18.5-1ubuntu1.3"}]}],"versions":["3.16.5-1ubuntu3","3.18.1-1ubuntu1","3.18.2-0ubuntu1","3.18.2-0ubuntu2","3.18.3-1ubuntu1","3.18.3-1ubuntu2","3.18.4-0ubuntu1","3.18.5-1ubuntu1","3.18.5-1ubuntu1.1","3.18.5-1ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.5-0ubuntu0.18.04.3"}]}],"versions":["3.26.1-1ubuntu1","3.26.2-1ubuntu1","3.26.2.1-1ubuntu1","3.26.2.1-1ubuntu3","3.26.3-1ubuntu1","3.26.5-1ubuntu3","3.27.90-1ubuntu1","3.28.0-1ubuntu1","3.28.0-2ubuntu1","3.28.0-2ubuntu2","3.28.1-1ubuntu1","3.28.3-0ubuntu0.18.04.1","3.28.5-0ubuntu0.18.04.1","3.28.5-0ubuntu0.18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.36.3-0ubuntu1.1"}]}],"versions":["3.34.1-1","3.34.1-1build1","3.34.1-1ubuntu1","3.34.1-2","3.34.3-2","3.35.91-1","3.35.92-1","3.36.0-1","3.36.1-1","3.36.1-2","3.36.2-0ubuntu1","3.36.3-0ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.34.4-lp152.2.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"evolution-ews","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.34.4-lp152.2.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.40.4-1.4"}]}],"bundled":3}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"gnome","product":"evolution-data-server"}],"references":[{"url":"https://gitlab.gnome.org/GNOME/evolution-data-server/-/issues/226","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/07/msg00012.html","tags":["x_refsource_CONFIRM","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://gitlab.gnome.org/GNOME//evolution-data-server/commit/ba82be72cfd427b5d72ff21f929b3a6d8529c4df","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://security-tracker.debian.org/tracker/DSA-4725-1","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security-tracker.debian.org/tracker/DLA-2281-1","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://gitlab.gnome.org/GNOME/evolution-data-server/-/commit/f404f33fb01b23903c2bbb16791c7907e457fbac","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1173910","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://www.debian.org/security/2020/dsa-4725","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://usn.ubuntu.com/4429-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMBEZWA22EAYAZQWUX4KPEBER726KSIG/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14928","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QMBEZWA22EAYAZQWUX4KPEBER726KSIG/"},{"url":"https://github.com/advisories/GHSA-3rg7-72j5-5xpv"},{"url":"https://errata.almalinux.org/8/ALSA-2020-4649.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2020-14928","tags":["report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-14928","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0351.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26962","tags":["report"]},{"url":"https://lists.debian.org/debian-security-announce/2020/msg00131.html","tags":["web"]},{"url":"https://www.debian.org/lts/security/2020/dla-2281","tags":["web"]},{"url":"https://www.debian.org/lts/security/2020/dla-2309","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1785","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4649","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1825447","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1836165","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1836279","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1857470","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4649.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-14928","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-14928","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2020:4649","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210885-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1173910","tags":["report"]},{"url":"https://bugzilla.suse.com/1174712","tags":["report"]},{"url":"https://bugzilla.suse.com/1182882","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14928","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16117","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210891-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210949-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-14928","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4429-1","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/I3CUVYOHJVMCTZXIKRZXRNXLROM7HCFQ/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3257","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-14928","description":"evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a \"begin TLS\" response, eds reads additional data and evaluates it in a TLS context, aka \"response injection.\"","status":"published","published":"2020-07-17T15:30:42Z","modified":"2024-08-04T13:00:52.067Z","updated_at":"2026-11-02T14:35:46.873079Z"}],"euvd":[{"id":"EUVD-2020-7064","description":"evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a \"begin TLS\" response, eds reads additional data and evaluates it in a TLS context, aka \"response injection.\"","status":"published","published":"2020-07-17T15:30:42Z","modified":"2024-08-04T13:00:52Z","updated_at":"2026-11-03T03:07:33.617168Z"}],"ghsa":[{"id":"GHSA-3rg7-72j5-5xpv","title":"evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and...","description":"evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a \"begin TLS\" response, eds reads additional data and evaluates it in a TLS context, aka \"response injection.\"","status":"published","published":"2022-05-24T17:23:50Z","modified":"2023-01-29T05:03:34Z","updated_at":"2026-11-02T14:45:20.937669Z"}],"nvd":[{"id":"CVE-2020-14928","description":"evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a \"begin TLS\" response, eds reads additional data and evaluates it in a TLS context, aka \"response injection.\"","status":"published","published":"2020-07-17T16:15:11.387Z","modified":"2026-06-17T02:55:47.247Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-74"],"updated_at":"2026-11-02T14:06:10.086163Z"}],"osv":[{"id":"CVE-2020-14928","description":"evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a \"begin TLS\" response, eds reads additional data and evaluates it in a TLS context, aka \"response injection.\"","status":"published","published":"2020-07-17T16:15:11.387Z","modified":"2026-10-20T13:51:52.245115271Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:14.418339Z"},{"id":"DEBIAN-CVE-2020-14928","description":"evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a \"begin TLS\" response, eds reads additional data and evaluates it in a TLS context, aka \"response injection.\"","status":"published","published":"2020-07-17T16:15:11.387Z","modified":"2026-10-26T12:02:27.090608441Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:33.384087Z"},{"id":"OESA-2022-1785","title":"evolution-data-server security update","description":"The evolution-data-server package provides a personal information management application that provides integrated mail, calendaring and address book functionality. The evolution-data-server package provides a single database for common, desktop-wide information, such as a user\u0026apos;s address book or calendar events.\r\n\r\nSecurity Fix(es):\r\n\r\nevolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a \u0026quot;begin TLS\u0026quot; response, eds reads additional data and evaluates it in a TLS context, aka \u0026quot;response injection.\u0026quot;(CVE-2020-14928)","status":"published","published":"2022-07-30T11:05:03Z","modified":"2026-08-18T01:16:52.363409237Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2020:4649","title":"Red Hat Security Advisory: evolution security and bug fix update","status":"published","published":"2024-09-16T04:03:41Z","modified":"2026-06-27T10:12:08Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RLSA-2020:4649","title":"Low: evolution security and bug fix update","description":"Evolution is a GNOME application that provides integrated email, calendar, contact management, and communications functionality.\n\nThe evolution-data-server packages provide a unified back end for applications which interact with contacts, tasks and calendar information. Evolution Data Server was originally developed as a back end for the Evolution information management application, but is now used by various other applications.\n\nOpenChange provides libraries to access Microsoft Exchange servers using native protocols.\n\nSecurity Fix(es):\n\n* evolution-data-server: Response injection via STARTTLS in SMTP and POP3 (CVE-2020-14928)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","status":"published","published":"2020-11-03T12:23:41Z","modified":"2026-02-04T21:45:08.214032Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2020-14928","description":"evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a \"begin TLS\" response, eds reads additional data and evaluates it in a TLS context, aka \"response injection.\"","status":"published","published":"2020-07-08T00:00:00Z","modified":"2026-04-22T12:19:23.854786Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:23.344108Z"},{"id":"ALSA-2020:4649","title":"Low: evolution security and bug fix update","description":"Evolution is a GNOME application that provides integrated email, calendar, contact management, and communications functionality.\n\nThe evolution-data-server packages provide a unified back end for applications which interact with contacts, tasks and calendar information. Evolution Data Server was originally developed as a back end for the Evolution information management application, but is now used by various other applications.\n\nOpenChange provides libraries to access Microsoft Exchange servers using native protocols.\n\nSecurity Fix(es):\n\n* evolution-data-server: Response injection via STARTTLS in SMTP and POP3 (CVE-2020-14928)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2020-11-03T12:23:41Z","modified":"2026-10-29T11:00:14.499068593Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"DLA-2281-1","title":"evolution-data-server - security update","status":"published","published":"2020-07-16T00:00:00Z","modified":"2026-03-09T01:18:06.799351Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-4725-1","title":"evolution-data-server - security update","status":"published","published":"2020-07-15T00:00:00Z","modified":"2026-03-09T02:08:30.733494Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2020-0351","title":"Updated evolution-data-server packages fix security vulnerabilities","description":"evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue\nthat affects SMTP and POP3. When a server sends a \"begin TLS\" response,\neds reads additional data and evaluates it in a TLS context, aka\n\"response injection\". (CVE-2020-14928)\n\nIn GNOME evolution-data-server before 3.35.91, a malicious server can crash\nthe mail client with a NULL pointer dereference by sending an invalid\n(e.g., minimal) CAPABILITY line on a connection attempt.\nThis is related to imapx_free_capability and imapx_connect_to_server.\n(CVE-2020-16117)\n","status":"published","published":"2020-08-28T14:46:59Z","modified":"2026-04-16T04:43:48.272910804Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2021:0482-1","title":"Security update for evolution-data-server","description":"This update for evolution-data-server fixes the following issues:\n\n- CVE-2020-16117: Fix crash on malformed server response with minimal capabilities (bsc#1174712).\n- CVE-2020-14928: Response injection via STARTTLS in SMTP and POP3 (bsc#1173910).\n- Fix buffer overrun when parsing base64 data (bsc#1182882).\n\nThis update for evolution-ews fixes the following issue:\n\n- Fix buffer overrun when parsing base64 data (bsc#1182882).\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2021-03-27T19:04:57Z","modified":"2026-02-04T03:31:20.193266Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2024:10744-1","title":"evolution-data-server-3.40.4-1.4 on GA media","description":"These are all security issues fixed in the evolution-data-server-3.40.4-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:04:24.651834Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2021:0885-1","title":"Security update for evolution-data-server","description":"This update for evolution-data-server fixes the following issues:\n\n- Fix buffer overrun when parsing base64 data (bsc#1182882).\n- CVE-2020-16117: Fix crash on malformed server response with minimal capabilities (bsc#1174712).\n- CVE-2020-14928: Response injection via STARTTLS in SMTP and POP3 (bsc#1173910).\n","status":"published","published":"2021-03-19T14:48:30Z","modified":"2026-02-04T03:08:24.197133Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0891-1","title":"Security update for evolution-data-server","description":"This update for evolution-data-server fixes the following issues:\n\n- Fix buffer overrun when parsing base64 data (bsc#1182882).\n- CVE-2020-16117: Fix crash on malformed server response with minimal capabilities (bsc#1174712).\n- CVE-2020-14928: Response injection via STARTTLS in SMTP and POP3 (bsc#1173910).\n","status":"published","published":"2021-03-19T14:52:37Z","modified":"2026-02-04T03:28:28.661297Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0949-1","title":"Security update for evolution-data-server","description":"This update for evolution-data-server fixes the following issues:\n\n- CVE-2020-16117: Fix crash on malformed server response with minimal capabilities (bsc#1174712).\n- CVE-2020-14928: Response injection via STARTTLS in SMTP and POP3 (bsc#1173910).\n- Fix buffer overrun when parsing base64 data (bsc#1182882).\n\nThis update for evolution-ews fixes the following issue:\n\n- Fix buffer overrun when parsing base64 data (bsc#1182882).\n","status":"published","published":"2021-03-24T13:32:06Z","modified":"2026-02-04T04:23:42.470075Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"USN-4429-1","title":"evolution-data-server vulnerability","description":"It was discovered that Evolution Data Server incorrectly handled STARTTLS\nwhen using SMTP and POP3. A remote attacker could possibly use this issue\nto perform a response injection attack.\n","status":"published","published":"2020-07-22T12:03:30Z","modified":"2026-04-22T10:06:30.935893Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}