{"id":"CVE-2022-26495","aliases":["ALPINE-CVE-2022-26495","DEBIAN-CVE-2022-26495","DLA-2944-1","DSA-5100-1","EUVD-2022-31053","GHSA-q9rw-8758-hccj","MGASA-2022-0403","SUSE-SU-2022:1276-1","UBUNTU-CVE-2022-26495","USN-5323-1","openSUSE-SU-2024:11993-1"],"status":"published","title":"In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer...","description":"In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff in the name length field will cause a zero-sized buffer to be allocated for the name, resulting in a write to a dangling pointer. This issue exists for the NBD_OPT_INFO, NBD_OPT_GO, and NBD_OPT_EXPORT_NAME messages.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.02859,"percentile":0.86862,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2022-03-06T00:00:00Z","modified":"2026-11-03T08:02:56Z","fixes":[{"ecosystem":"Alpine:v3.16","package":"nbd","fixed_in":["3.24-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"nbd","fixed_in":["3.24-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"nbd","fixed_in":["3.24-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"nbd","fixed_in":["3.24-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"nbd","fixed_in":["3.24-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"nbd","fixed_in":["3.24-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"nbd","fixed_in":["3.24-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"nbd","fixed_in":["3.24-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"nbd","fixed_in":["3.24-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"nbd","fixed_in":["1:3.24-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nbd","fixed_in":["1:3.24-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nbd","fixed_in":["1:3.24-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"nbd","fixed_in":["1:3.15.2-3+deb9u1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"nbd","fixed_in":["1:3.16.2-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"nbd","fixed_in":["1:3.20-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"nbd","fixed_in":["1:3.23-3ubuntu1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"nbd","fixed_in":["3.24-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.16","package":"nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.24-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.24-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.24-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.24-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.24-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.24-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.24-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.24-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.24-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.24-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.24-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.24-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.15.2-3+deb9u1"}]}],"versions":["1:3.15.2-3"]},{"source":"osv","ecosystem":"Debian:10","package":"nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.19-3+deb10u1"}]}],"versions":["1:3.19-3"],"bundled":2},{"source":"osv","ecosystem":"Debian:11","package":"nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.21-1+deb11u1"}]}],"versions":["1:3.21-1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:8","package":"nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.24-1.2.mga8"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.24-150000.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.3-3ubuntu1","1:3.4-1ubuntu1","1:3.4-2ubuntu1","1:3.5-1ubuntu1","1:3.6-1ubuntu1","1:3.7-1","1:3.7-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.10-1","1:3.13-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.16.2-1ubuntu0.2"}]}],"versions":["1:3.15.2-3","1:3.16.2-1","1:3.16.2-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.20-1ubuntu0.1"}]}],"versions":["1:3.19-3","1:3.20-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.23-3ubuntu1"}]}],"versions":["1:3.21-1build3","1:3.22-1","1:3.23-3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.16.2-1ubuntu0.2"}]}],"versions":["1:3.15.2-3","1:3.16.2-1","1:3.16.2-1ubuntu0.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.20-1ubuntu0.1"}]}],"versions":["1:3.19-3","1:3.20-1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.24-1.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"network_block_device_project","product":"network_block_device"}],"references":[{"url":"https://lists.debian.org/nbd/2022/01/msg00037.html","tags":["x_transferred","Exploit","Mailing List","Third Party Advisory","web","report"]},{"url":"https://sourceforge.net/projects/nbd/files/nbd/","tags":["x_transferred","Product","Release Notes","Third Party Advisory","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/03/msg00014.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://www.debian.org/security/2022/dsa-5100","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IZHR73XMAJTCFGKUZRXVTZKCK2X3IFNA/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU5JFD4PEJED72TZLZ5R2Q2SFXICU5I5/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G2UPX62BIWOOHSACGUDB7E3O4URNN37F/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://security.gentoo.org/glsa/202402-10","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26495","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZHR73XMAJTCFGKUZRXVTZKCK2X3IFNA/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU5JFD4PEJED72TZLZ5R2Q2SFXICU5I5/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G2UPX62BIWOOHSACGUDB7E3O4URNN37F/"},{"url":"https://github.com/advisories/GHSA-q9rw-8758-hccj"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-26495","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/26xxx/CVE-2022-26495.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-26495","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0403.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30153","tags":["report"]},{"url":"https://www.debian.org/lts/security/2022/dla-2944","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-5323-1","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/PU5JFD4PEJED72TZLZ5R2Q2SFXICU5I5/","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GY3FXWPGNBOFA2QZOFDFNU2AZJWYEW7A/","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221276-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1196827","tags":["report"]},{"url":"https://bugzilla.suse.com/1196828","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26496","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-26495","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-26495","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-26496","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-26495","description":"In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff in the name length field will cause a zero-sized buffer to be allocated for the name, resulting in a write to a dangling pointer. This issue exists for the NBD_OPT_INFO, NBD_OPT_GO, and NBD_OPT_EXPORT_NAME messages.","status":"published","published":"2022-03-06T00:00:00Z","modified":"2024-08-03T05:03:32.903Z","updated_at":"2026-11-02T14:34:25.954329Z"}],"euvd":[{"id":"EUVD-2022-31053","description":"In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff in the name length field will cause a zero-sized buffer to be allocated for the name, resulting in a write to a dangling pointer. This issue exists for the NBD_OPT_INFO, NBD_OPT_GO, and NBD_OPT_EXPORT_NAME messages.","status":"published","published":"2022-03-06T00:00:00Z","modified":"2024-08-03T05:03:32Z","updated_at":"2026-11-03T03:25:44.694159Z"}],"ghsa":[{"id":"GHSA-q9rw-8758-hccj","title":"In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer...","description":"In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff in the name length field will cause a zero-sized buffer to be allocated for the name, resulting in a write to a dangling pointer. This issue exists for the NBD_OPT_INFO, NBD_OPT_GO, and NBD_OPT_EXPORT_NAME messages.","status":"published","published":"2022-03-07T00:00:41Z","modified":"2024-02-13T05:07:39Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:55:36.780787Z"}],"nvd":[{"id":"CVE-2022-26495","description":"In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff in the name length field will cause a zero-sized buffer to be allocated for the name, resulting in a write to a dangling pointer. This issue exists for the NBD_OPT_INFO, NBD_OPT_GO, and NBD_OPT_EXPORT_NAME messages.","status":"published","published":"2022-03-06T06:15:07.303Z","modified":"2026-06-17T04:35:17.903Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:07:12.711288Z"}],"osv":[{"id":"ALPINE-CVE-2022-26495","description":"In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff in the name length field will cause a zero-sized buffer to be allocated for the name, resulting in a write to a dangling pointer. This issue exists for the NBD_OPT_INFO, NBD_OPT_GO, and NBD_OPT_EXPORT_NAME messages.","status":"published","published":"2022-03-06T06:15:07.303Z","modified":"2026-11-03T07:31:22.814771063Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:50:01.054176Z"},{"id":"DEBIAN-CVE-2022-26495","description":"In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff in the name length field will cause a zero-sized buffer to be allocated for the name, resulting in a write to a dangling pointer. This issue exists for the NBD_OPT_INFO, NBD_OPT_GO, and NBD_OPT_EXPORT_NAME messages.","status":"published","published":"2022-03-06T06:15:07.303Z","modified":"2026-11-03T08:02:56.778337615Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T08:24:39.643572Z"},{"id":"UBUNTU-CVE-2022-26495","description":"In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff in the name length field will cause a zero-sized buffer to be allocated for the name, resulting in a write to a dangling pointer. This issue exists for the NBD_OPT_INFO, NBD_OPT_GO, and NBD_OPT_EXPORT_NAME messages.","status":"published","published":"2022-03-06T06:15:00Z","modified":"2026-02-04T02:52:33.502741Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:53:53.13624Z"},{"id":"CVE-2022-26495","description":"In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff in the name length field will cause a zero-sized buffer to be allocated for the name, resulting in a write to a dangling pointer. This issue exists for the NBD_OPT_INFO, NBD_OPT_GO, and NBD_OPT_EXPORT_NAME messages.","status":"published","published":"2022-03-06T00:00:00Z","modified":"2026-10-28T02:30:38.207160701Z","updated_at":"2026-11-02T15:44:24.758293Z"},{"id":"DLA-2944-1","title":"nbd - security update","status":"published","published":"2022-03-10T00:00:00Z","modified":"2026-03-09T01:20:25.541931Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5100-1","title":"nbd - security update","status":"published","published":"2022-03-12T00:00:00Z","modified":"2026-03-09T02:11:13.533522Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2022-0403","title":"Updated nbd packages fix security vulnerability","description":"It was discovered that nbd prior to 3.24 contained an integer overflow\nwith a resultant heap-based buffer overflow. A value of 0xffffffff in the\nname length field will cause a zero-sized buffer to be allocated for the\nname resulting in a write to a dangling pointer (CVE-2022-26495).\n\nStack-based buffer overflow. An attacker can cause a buffer overflow in\nthe parsing of the name field by sending a crafted NBD_OPT_INFO or\nNBD_OPT_GO message with an large value as the length of the name.\n(CVE-2022-26496)\n\nPackaging has been adjusted to create the required nbd user and group at\ninstallation.\n","status":"published","published":"2022-11-01T22:58:59Z","modified":"2026-04-16T04:42:00.343357768Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:11993-1","title":"nbd-3.24-1.1 on GA media","description":"These are all security issues fixed in the nbd-3.24-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:20:37.461344Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2022:1276-1","title":"Security update for nbd","description":"This update for nbd fixes the following issues:\n\n- CVE-2022-26495: Fixed an integer overflow with a resultant heap-based buffer overflow (bsc#1196827).\n- CVE-2022-26496: Fixed a stack-based buffer overflow when parsing the name field by sending a crafted NBD_OPT_INFO (bsc#1196828). \n\n\nUpdate to version 3.24 (bsc#1196827, bsc#1196828, CVE-2022-26495, CVE-2022-26496):\n  * https://github.com/advisories/GHSA-q9rw-8758-hccj\n\nUpdate to version 3.23:\n  * Don't overwrite the hostname with the TLS hostname\n\nUpdate to version 3.22:\n  - nbd-server: handle auth for v6-mapped IPv4 addresses \n  - nbd-client.c: parse the next option in all cases\n  - configure.ac: silence a few autoconf 2.71 warnings\n  - spec: Relax NBD_OPT_LIST_META_CONTEXTS \n  - client: Don't confuse Unix socket with TLS hostname\n  - server: Avoid deprecated g_memdup\n\nUpdate to version 3.21:\n  - Fix --disable-manpages build\n  - Fix a bug in whitespace handling regarding authorization files\n  - Support client-side marking of devices as read-only\n  - Support preinitialized NBD connection (i.e., skip the negotiation).\n  - Fix the systemd unit file for nbd-client so it works with netlink (the\n    more common situation nowadays)\n\nUpdate to 3.20.0 (no changelog)\n\nUpdate to version 3.19.0:\n  * Better error messages in case of unexpected disconnects\n  * Better compatibility with non-bash sh implementations\n    (for configure.sh)\n  * Fix for a segfault in NBD_OPT_INFO handling\n  * The ability to specify whether to listen on both TCP and Unix\n    domain sockets, rather than to always do so\n  * Various minor editorial and spelling fixes in the documentation.\n\nUpdate to version 1.18.0:\n  * Client: Add the '-g' option to avoid even trying the NBD_OPT_GO\n    message\n  * Server: fixes to inetd mode\n  * Don't make gnutls and libnl automagic.\n  * Server: bugfixes in handling of some export names during verification.\n  * Server: clean supplementary groups when changing user.\n  * Client: when using the netlink protocol, only set a timeout\n    when there actually is a timeout, rather than defaulting to 0\n    seconds\n  * Improve documentation on the nbdtab file\n  * Minor improvements to some error messages\n  * Improvements to test suite so it works better on non-GNU\n    userland environments\n\n- Update to version 1.17.0:\n  * proto: add xNBD command NBD_CMD_CACHE to the spec\n  * server: do not crash when handling child name\n  * server: Close socket pair when fork fails\n","status":"published","published":"2022-04-20T07:17:17Z","modified":"2026-02-04T03:24:28.105928Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"USN-5323-1","title":"nbd vulnerabilities","description":"It was discovered that NBD incorrectly handled name length fields. A remote\nattacker could use this issue to cause NBD to crash, resulting in a denial\nof service, or possibly execute arbitrary code.\n","status":"published","published":"2022-03-14T10:54:31Z","modified":"2026-04-27T16:04:31.999977Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}