{"id":"CVE-2022-3786","aliases":["ALPINE-CVE-2022-3786","ALSA-2022:7288","BELL-CVE-2022-3786","BIT-node-2022-3786","BIT-node-min-2022-3786","DEBIAN-CVE-2022-3786","EUVD-2022-7358","GHSA-h8jm-2x53-xhp5","RHSA-2022:7288","RLSA-2022:7288","RUSTSEC-2022-0065","SUSE-SU-2022:3843-1","SUSE-SU-2022:4586-1","UBUNTU-CVE-2022-3786","USN-5710-1","openSUSE-SU-2024:12469-1","openSUSE-SU-2024:12475-1","openSUSE-SU-2024:12479-1","openSUSE-SU-2024:12480-1","openSUSE-SU-2025:14739-1","openSUSE-SU-2025:14740-1"],"status":"published","title":"X.509 Email Address Variable Length Buffer Overflow","description":"A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.' character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.92488,"percentile":0.99828,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-120"],"published":"2022-11-01T00:00:00Z","modified":"2026-11-03T08:03:54Z","exploits":[{"source":"pocgithub","id":"WhatTheFuzz/openssl-fuzz","title":"WhatTheFuzz/openssl-fuzz","date":"2023-01-11","url":"https://github.com/WhatTheFuzz/openssl-fuzz"}],"fixes":[{"ecosystem":"crates.io","package":"openssl-src","fixed_in":["300.0.11"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.17","package":"nodejs","fixed_in":["18.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"nodejs","fixed_in":["18.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"nodejs","fixed_in":["18.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"nodejs","fixed_in":["18.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"nodejs","fixed_in":["18.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"nodejs","fixed_in":["18.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"nodejs","fixed_in":["18.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"nodejs","fixed_in":["18.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openssl","fixed_in":["3.0.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openssl","fixed_in":["3.0.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openssl","fixed_in":["3.0.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openssl","fixed_in":["3.0.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openssl","fixed_in":["3.0.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openssl","fixed_in":["3.0.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openssl","fixed_in":["3.0.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openssl","fixed_in":["3.0.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"openssl3","fixed_in":["3.0.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openssl3","fixed_in":["3.0.7-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"node","fixed_in":["18.11.0","18.12.1","19.0.1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"node-min","fixed_in":["18.11.0","18.12.1","19.0.1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"openssl","fixed_in":["3.0.7-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openssl","fixed_in":["3.0.7-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openssl","fixed_in":["3.0.7-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openssl","fixed_in":["3.0.2-0ubuntu1.7"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"crates.io","package":"openssl-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"300.0.0"},{"fixed":"300.0.11"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"openssl3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openssl3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-43.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-43.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-43.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-43.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Bitnami","package":"node","ranges":[{"type":"SEMVER","events":[{"introduced":"18.0.0"},{"fixed":"18.11.0"},{"introduced":"18.12.0"},{"fixed":"18.12.1"},{"introduced":"19.0.0"},{"fixed":"19.0.1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"node-min","ranges":[{"type":"SEMVER","events":[{"introduced":"18.0.0"},{"fixed":"18.11.0"},{"introduced":"18.12.0"},{"fixed":"18.12.1"},{"introduced":"19.0.0"},{"fixed":"19.0.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-1"}]}]},{"source":"osv","ecosystem":"crates.io","package":"openssl-src","ranges":[{"type":"SEMVER","events":[{"introduced":"300.0.0"},{"fixed":"300.0.11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-43.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-43.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-43.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssl-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-43.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-43.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-43.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-43.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-43.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-43.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssl-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-43.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-43.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"crates.io","package":"openssl-src","ranges":[{"type":"SEMVER","events":[{"introduced":"300.0.0"},{"fixed":"300.0.11"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-150400.4.11.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-150400.4.11.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-150400.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-150400.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-0ubuntu1.7"}]}],"versions":["1.1.1l-1ubuntu1","3.0.0-1ubuntu1","3.0.1-0ubuntu1","3.0.2-0ubuntu1","3.0.2-0ubuntu1.1","3.0.2-0ubuntu1.2","3.0.2-0ubuntu1.4","3.0.2-0ubuntu1.5","3.0.2-0ubuntu1.6"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-0ubuntu1.7"}]}],"versions":["1.1.1l-1ubuntu1","3.0.0-1ubuntu1","3.0.1-0ubuntu1","3.0.2-0ubuntu1","3.0.2-0ubuntu1.1","3.0.2-0ubuntu1.2","3.0.2-0ubuntu1.4","3.0.2-0ubuntu1.5","3.0.2-0ubuntu1.6"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cargo-audit-advisory-db","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221102-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.0.3-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.0.3-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"44.0.0-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-cryptography-vectors","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"44.0.0-1.1"}]}],"bundled":2}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"nodejs","product":"node.js"},{"vendor":"openssl","product":"openssl"},{"vendor":"siemens","product":"calibre ice"},{"vendor":"siemens","product":"mcenter"},{"vendor":"siemens","product":"scalance x204rna (hsr)"},{"vendor":"siemens","product":"scalance x204rna (prp)"},{"vendor":"siemens","product":"scalance x204rna eec (hsr)"},{"vendor":"siemens","product":"scalance x204rna eec (prp)"},{"vendor":"siemens","product":"scalance x204rna eec (prp/hsr)"},{"vendor":"siemens","product":"sicam gridpass"},{"vendor":"siemens","product":"simatic rtls locating manager"}],"references":[{"url":"https://www.openssl.org/news/secadv/20221101.txt","tags":["vendor-advisory","x_transferred","Vendor Advisory","advisory","web","article","report"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c42165b5706e42f67ef8ef4c351a9a4c5d21639a","tags":["patch","x_transferred","Patch","Vendor Advisory","advisory","fix","web"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00789.html","tags":["web","advisory"]},{"url":"https://www.kb.cert.org/vuls/id/794340","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-408105.html","tags":["web"]},{"url":"https://github.com/rustsec/advisory-db/pull/1452","tags":["web"]},{"url":"https://github.com/alexcrichton/openssl-src-rs/commit/4a31c14f31e1a08c18893a37e304dd1dd4b7daa3","tags":["web"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2022-0065.html","tags":["web","advisory"]},{"url":"https://github.com/openssl/openssl/commit/fe3b639dc19b325846f4f6801f2f4604f56e3de3","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3786","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/63YRPWPUSX3MBHNPIEJZDKQT6YA7UF6S/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DWP23EZYOBDJQP7HP4YU7W2ABU2YDITS/"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0023","tags":["web"]},{"url":"https://security.gentoo.org/glsa/202211-01","tags":["web"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-W9sdCc2a","tags":["web"]},{"url":"http://packetstormsecurity.com/files/169687/OpenSSL-Security-Advisory-20221101.html","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/01/15","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/01/16","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/01/17","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/01/18","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/01/19","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/01/20","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/01/21","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/01/24","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/1","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/10","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/11","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/12","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/2","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/3","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/5","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/6","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/7","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/9","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20221102-0001/"},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/13","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/14","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/15","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/1","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/2","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/3","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/5","tags":["web"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=c42165b5706e42f67ef8ef4c351a9a4c5d21639a","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63YRPWPUSX3MBHNPIEJZDKQT6YA7UF6S/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DWP23EZYOBDJQP7HP4YU7W2ABU2YDITS/"},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/10","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/11","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/6","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/7","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/9","tags":["web"]},{"url":"https://github.com/advisories/GHSA-h8jm-2x53-xhp5"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-3786","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7288","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-3602","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-3786","tags":["report"]},{"url":"https://bugzilla.redhat.com/2137723","tags":["report"]},{"url":"https://bugzilla.redhat.com/2139104","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-7288.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-3786","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3786.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-3786","tags":["advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20221102-0001","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DWP23EZYOBDJQP7HP4YU7W2ABU2YDITS","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/63YRPWPUSX3MBHNPIEJZDKQT6YA7UF6S","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DWP23EZYOBDJQP7HP4YU7W2ABU2YDITS","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63YRPWPUSX3MBHNPIEJZDKQT6YA7UF6S","tags":["web"]},{"url":"https://github.com/alexcrichton/openssl-src-rs","tags":["package"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2022-004","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2137723","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2139104","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7288.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-3602","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3602","tags":["advisory"]},{"url":"https://www.openssl.org/blog/blog/2022/11/01/email-address-overflows/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-3786","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2022:7288","tags":["advisory"]},{"url":"https://crates.io/crates/openssl-src","tags":["package"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223843-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1204226","tags":["report"]},{"url":"https://bugzilla.suse.com/1204714","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3786","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224586-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1206374","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3996","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-3786","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5710-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-3358","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-3602","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-36086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23931","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BYRT4L3ZDCZCJBPH7KDKJTBG4Z4CVCQS/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-3786","title":"X.509 Email Address Variable Length Buffer Overflow","description":"A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.' character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.\n\n","status":"published","published":"2022-11-01T00:00:00Z","modified":"2026-04-14T08:58:03.787Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:34:32.843656Z"}],"euvd":[{"id":"EUVD-2022-7358","description":"A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.' character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.\n\n","status":"published","published":"2022-11-01T00:00:00Z","modified":"2026-04-14T08:58:03Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T19:24:27.052992Z"}],"ghsa":[{"id":"GHSA-h8jm-2x53-xhp5","title":"X.509 Email Address Variable Length Buffer Overflow","description":"A buffer overrun can be triggered in X.509 certificate verification,\nspecifically in name constraint checking. Note that this occurs after\ncertificate chain signature verification and requires either a CA to\nhave signed a malicious certificate or for an application to continue\ncertificate verification despite failure to construct a path to a trusted\nissuer. An attacker can craft a malicious email address in a certificate\nto overflow an arbitrary number of bytes containing the `.` character\n(decimal 46) on the stack. This buffer overflow could result in a crash\n(causing a denial of service).\n\nIn a TLS client, this can be triggered by connecting to a malicious\nserver. In a TLS server, this can be triggered if the server requests\nclient authentication and a malicious client connects.\n","status":"published","published":"2022-11-01T17:45:21Z","modified":"2023-02-02T05:04:33Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:36:40.500292Z"}],"nvd":[{"id":"CVE-2022-3786","description":"A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.' character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.\n\n","status":"published","published":"2022-11-01T18:15:11.047Z","modified":"2026-06-17T05:00:18.193Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:07:31.504574Z"}],"osv":[{"id":"ALPINE-CVE-2022-3786","description":"A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.' character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.\n\n","status":"published","published":"2022-11-01T18:15:11.047Z","modified":"2026-11-03T07:18:33.498059034Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"BELL-CVE-2022-3786","title":"CVE-2022-3786 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:35.5633Z","modified":"2026-02-18T07:38:27.124814Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"CVE-2022-3786","title":"X.509 Email Address Variable Length Buffer Overflow","description":"A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.' character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.\n\n","status":"published","published":"2022-11-01T00:00:00Z","modified":"2026-10-28T02:31:06.59296611Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:26.53798Z"},{"id":"DEBIAN-CVE-2022-3786","description":"A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.' character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.","status":"published","published":"2022-11-01T18:15:11.047Z","modified":"2026-11-03T08:03:54.303024998Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T08:23:34.488036Z"},{"id":"GHSA-h8jm-2x53-xhp5","title":"X.509 Email Address Variable Length Buffer Overflow","description":"A buffer overrun can be triggered in X.509 certificate verification,\nspecifically in name constraint checking. Note that this occurs after\ncertificate chain signature verification and requires either a CA to\nhave signed a malicious certificate or for an application to continue\ncertificate verification despite failure to construct a path to a trusted\nissuer. An attacker can craft a malicious email address in a certificate\nto overflow an arbitrary number of bytes containing the `.` character\n(decimal 46) on the stack. This buffer overflow could result in a crash\n(causing a denial of service).\n\nIn a TLS client, this can be triggered by connecting to a malicious\nserver. In a TLS server, this can be triggered if the server requests\nclient authentication and a malicious client connects.\n","status":"published","published":"2022-11-01T17:45:21Z","modified":"2026-09-10T03:49:49.922157998Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T15:46:48.920784Z"},{"id":"RHSA-2022:7288","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-09-16T09:20:38Z","modified":"2026-08-05T10:12:44Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RLSA-2022:7288","title":"Important: openssl security update","description":"OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full strength general purpose cryptography library.\n\nSecurity Fix(es):\n\n* OpenSSL: X.509 Email Address Buffer Overflow (CVE-2022-3602)\n\n* OpenSSL: X.509 Email Address Variable Length Buffer Overflow (CVE-2022-3786)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-11-01T18:25:07Z","modified":"2026-02-05T12:15:07.109948Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-3786","description":"A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.' character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.","status":"published","published":"2022-11-01T00:00:00Z","modified":"2026-04-22T13:26:39.770974Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:54.697021Z"},{"id":"ALSA-2022:7288","title":"Important: openssl security update","description":"OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full strength general purpose cryptography library.\n\nSecurity Fix(es):\n\n* OpenSSL: X.509 Email Address Buffer Overflow (CVE-2022-3602)\n* OpenSSL: X.509 Email Address Variable Length Buffer Overflow (CVE-2022-3786)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-11-01T00:00:00Z","modified":"2026-10-29T11:31:14.964564755Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"BIT-node-2022-3786","title":"X.509 Email Address Variable Length Buffer Overflow","description":"A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.' character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.","status":"published","published":"2024-03-06T11:02:40.764Z","modified":"2026-10-16T09:45:22.475017179Z","updated_at":"2026-11-02T15:28:34.007508Z"},{"id":"BIT-node-min-2022-3786","title":"X.509 Email Address Variable Length Buffer Overflow","description":"A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.' character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.","status":"published","published":"2024-12-16T14:01:09.418Z","modified":"2026-10-16T09:45:30.868036675Z","updated_at":"2026-11-02T15:28:34.007508Z"},{"id":"openSUSE-SU-2024:12469-1","title":"cargo-audit-advisory-db-20221102-1.1 on GA media","description":"These are all security issues fixed in the cargo-audit-advisory-db-20221102-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:16:46.278292Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"openSUSE-SU-2024:12475-1","title":"libopenssl-3-devel-3.0.7-1.1 on GA media","description":"These are all security issues fixed in the libopenssl-3-devel-3.0.7-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:30:17.063132Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"openSUSE-SU-2024:12479-1","title":"python310-cryptography-38.0.3-1.1 on GA media","description":"These are all security issues fixed in the python310-cryptography-38.0.3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:13:16.611165Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"openSUSE-SU-2024:12480-1","title":"python310-cryptography-vectors-38.0.3-1.1 on GA media","description":"These are all security issues fixed in the python310-cryptography-vectors-38.0.3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:09:29.272647Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"openSUSE-SU-2025:14739-1","title":"python311-cryptography-44.0.0-1.1 on GA media","description":"These are all security issues fixed in the python311-cryptography-44.0.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-02-06T00:00:00Z","modified":"2026-02-04T02:37:19.74427Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2025:14740-1","title":"python311-cryptography-vectors-44.0.0-1.1 on GA media","description":"These are all security issues fixed in the python311-cryptography-vectors-44.0.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-02-06T00:00:00Z","modified":"2026-02-04T03:44:18.055894Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"RUSTSEC-2022-0065","title":"X.509 Email Address Variable Length Buffer Overflow","description":"A buffer overrun can be triggered in X.509 certificate verification,\nspecifically in name constraint checking. Note that this occurs after\ncertificate chain signature verification and requires either a CA to\nhave signed a malicious certificate or for an application to continue\ncertificate verification despite failure to construct a path to a trusted\nissuer. An attacker can craft a malicious email address in a certificate\nto overflow an arbitrary number of bytes containing the `.` character\n(decimal 46) on the stack. This buffer overflow could result in a crash\n(causing a denial of service).\n\nIn a TLS client, this can be triggered by connecting to a malicious\nserver. In a TLS server, this can be triggered if the server requests\nclient authentication and a malicious client connects.","status":"published","published":"2022-11-01T12:00:00Z","modified":"2024-12-16T15:27:12.425468Z","updated_at":"2026-11-02T15:53:39.971022Z"},{"id":"SUSE-SU-2022:3843-1","title":"Security update for openssl-3","description":"This update for openssl-3 fixes the following issues:\n\n- CVE-2022-3358: Fixed vulnerability where a custom cipher passed to EVP_CipherInit() could lead into NULL encryption being unexpectedly used (bsc#1204226).\n- CVE-2022-3602: Fixed a buffer overflow in the X.509 email address. (bsc#1204714)\n- CVE-2022-3786: Fixed another buffer overflow related to X.509 email address. (bsc#1204714)\n","status":"published","published":"2022-11-01T16:40:22Z","modified":"2026-02-04T04:10:49.982797Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:4586-1","title":"Security update for openssl-3","description":"This update for openssl-3 fixes the following issues:\n\n- CVE-2022-3996: Fixed X.509 Policy Constraints Double Locking (bsc#1206374)\n","status":"published","published":"2022-12-20T12:32:21Z","modified":"2026-02-04T03:16:22.713441Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"USN-5710-1","title":"openssl vulnerabilities","description":"It was discovered that OpenSSL incorrectly handled certain X.509 Email\nAddresses. If a certificate authority were tricked into signing a\nspecially-crafted certificate, a remote attacker could possibly use this\nissue to cause OpenSSL to crash, resulting in a denial of service. The\ndefault compiler options for affected releases reduce the vulnerability to\na denial of service. (CVE-2022-3602, CVE-2022-3786)\n\nIt was discovered that OpenSSL incorrectly handled applications creating\ncustom ciphers via the legacy EVP_CIPHER_meth_new() function. This issue\ncould cause certain applications that mishandled values to the function to\npossibly end up with a NULL cipher and messages in plaintext.\n(CVE-2022-3358)\n","status":"published","published":"2022-11-01T16:24:36Z","modified":"2026-04-27T16:32:25.316143292Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}