{"id":"CVE-2026-123610","aliases":["AZL-113164","AZL-113176","AZL-113275","AZL-113278","AZL-113302","DEBIAN-CVE-2026-123610","EUVD-2026-119369","GHSA-gg47-62fq-vrhp","GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348","UBUNTU-CVE-2026-123610"],"status":"published","title":"rustls before 0.23.46 Denial of Service via Brotli Certificate Decompression","description":"rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output size but accepts an input-selected large history window. Malicious peers can send a certificate with a five-byte Brotli header requesting up to 1 GiB before authentication, aborting Brotli-enabled clients or client-authenticating servers whose allocator cannot satisfy the request.","severity":{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00165,"percentile":0.05842,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-770"],"published":"2026-10-14T12:00:00Z","modified":"2026-11-11T14:17:32Z","fixes":[{"ecosystem":"crates.io","package":"rustls","fixed_in":["0.23.46","0.24.0-dev.2"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"crates.io","package":"rustls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23.46"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"rustls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.24.0-dev.1"},{"fixed":"0.24.0-dev.2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"kata-containers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.1.0.kata1-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"kata-containers-cc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"3.15.0.aks0-23"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.75.0-31"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.85.0"},{"last_affected":"1.98.1-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"rust-afterburn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"5.8.2-2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"rust-rustls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.20.8-4","0.20.8-4.1","0.20.8-4.2","0.21.10-1","0.21.12-1","0.21.12-2","0.21.12-3","0.21.12-4","0.21.12-5","0.21.12-6","0.21.12-7","0.21.12-8","0.21.12-9","0.21.5-1","0.21.5-2","0.21.5-3","0.21.5-4","0.21.5-5","0.21.6-1","0.21.6-2","0.21.6-3","0.21.6-4","0.21.7-1","0.21.8-1","0.21.8-2","0.21.8-3","0.21.8-3.1","0.21.9-1","0.23.16-1","0.23.20+ds-1","0.23.20+ds-10","0.23.20+ds-2","0.23.20+ds-3","0.23.20+ds-4","0.23.20+ds-5","0.23.20+ds-6","0.23.20+ds-7","0.23.20+ds-8","0.23.20+ds-9","0.23.25+ds-1","0.23.26+ds-1","0.23.31+ds-1","0.23.31+ds-2","0.23.31+ds-3","0.23.31+ds-4","0.23.31+ds-5","0.23.31+ds-6","0.23.31+ds-7","0.23.32+ds-1","0.23.32+ds-2","0.23.33+ds-1","0.23.33+ds-2","0.23.33+ds-3","0.23.33+ds-4","0.23.35+ds-1","0.23.36+ds-1","0.23.37+ds-1","0.23.37+ds-2","0.23.37+ds-3","0.23.38+ds-1","0.23.40+ds-1","0.23.41+ds-1","0.23.43+ds-1","0.23.45+ds-1","0.23.46+ds-1"]},{"source":"osv","ecosystem":"Debian:13","package":"rust-rustls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.23.26+ds-1","0.23.31+ds-1","0.23.31+ds-2","0.23.31+ds-3","0.23.31+ds-4","0.23.31+ds-5","0.23.31+ds-6","0.23.31+ds-7","0.23.32+ds-1","0.23.32+ds-2","0.23.33+ds-1","0.23.33+ds-2","0.23.33+ds-3","0.23.33+ds-4","0.23.35+ds-1","0.23.36+ds-1","0.23.37+ds-1","0.23.37+ds-2","0.23.37+ds-3","0.23.38+ds-1","0.23.40+ds-1","0.23.41+ds-1","0.23.43+ds-1","0.23.45+ds-1","0.23.46+ds-1"]},{"source":"osv","ecosystem":"Debian:14","package":"rust-rustls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.23.26+ds-1","0.23.31+ds-1","0.23.31+ds-2","0.23.31+ds-3","0.23.31+ds-4","0.23.31+ds-5","0.23.31+ds-6","0.23.31+ds-7","0.23.32+ds-1","0.23.32+ds-2","0.23.33+ds-1","0.23.33+ds-2","0.23.33+ds-3","0.23.33+ds-4","0.23.35+ds-1","0.23.36+ds-1","0.23.37+ds-1","0.23.37+ds-2","0.23.37+ds-3","0.23.38+ds-1","0.23.40+ds-1","0.23.41+ds-1","0.23.43+ds-1","0.23.45+ds-1","0.23.46+ds-1"]},{"source":"osv","ecosystem":"crates.io","package":"rustls","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.23.46"}]}]},{"source":"osv","ecosystem":"crates.io","package":"rustls","ranges":[{"type":"SEMVER","events":[{"introduced":"0.24.0-dev.1"},{"fixed":"0.24.0-dev.2"}]}]},{"source":"osv","ecosystem":"crates.io","package":"rustls","ranges":[{"type":"SEMVER","events":[{"introduced":"0.23.9"},{"fixed":"0.23.46"}]}]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"rust-rustls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.21.6-3","0.21.7-1","0.21.9-1","0.21.10-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"rust-rustls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.23.36+ds-1","0.23.41+ds-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"rust-rustls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.23.26+ds-1","0.23.33+ds-3build2","0.23.35+ds-1","0.23.35+ds-1build1","0.23.36+ds-1"]}],"products":[{"vendor":"rustls","product":"rustls"},{"vendor":"rustls project","product":"rustls"}],"references":[{"url":"https://github.com/rustls/rustls/security/advisories/GHSA-h2v8-394m-p7vv","tags":["vendor-advisory","advisory","web","report"]},{"url":"https://www.vulncheck.com/advisories/rustls-before-0.23.46-denial-of-service-via-brotli-certificate-decompression","tags":["third-party-advisory","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123610","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-gg47-62fq-vrhp"},{"url":"https://github.com/rustls/rustls/pull/3297","tags":["web","report"]},{"url":"https://github.com/rustls/rustls/pull/3354","tags":["web"]},{"url":"https://github.com/rustls/rustls/commit/1aa987af37d0d79b98781d345895ac0059ce345c","tags":["web"]},{"url":"https://github.com/rustls/rustls/commit/402b7b78b7ae87d59e19cf07ee07f3fc19e6537e","tags":["web"]},{"url":"https://github.com/rustls/rustls/releases/tag/v/0.23.46","tags":["web"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2026-0348.html","tags":["web","advisory","report"]},{"url":"https://github.com/advisories/GHSA-h2v8-394m-p7vv","tags":["report"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/123xxx/CVE-2026-123610.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-123610","tags":["advisory"]},{"url":"https://github.com/rustls/rustls","tags":["package"]},{"url":"https://crates.io/crates/rustls","tags":["package"]},{"url":"https://ubuntu.com/security/CVE-2026-123610","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-123610","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-123610","title":"rustls before 0.23.46 Denial of Service via Brotli Certificate Decompression","description":"rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output size but accepts an input-selected large history window. Malicious peers can send a certificate with a five-byte Brotli header requesting up to 1 GiB before authentication, aborting Brotli-enabled clients or client-authenticating servers whose allocator cannot satisfy the request.","status":"published","published":"2026-11-08T01:38:35.478Z","modified":"2026-11-09T13:52:03.16Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"},{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-770"],"updated_at":"2026-11-08T02:36:49.037074Z"}],"euvd":[{"id":"EUVD-2026-119369","description":"rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output size but accepts an input-selected large history window. Malicious peers can send a certificate with a five-byte Brotli header requesting up to 1 GiB before authentication, aborting Brotli-enabled clients or client-authenticating servers whose allocator cannot satisfy the request.","status":"published","published":"2026-11-08T01:38:35Z","modified":"2026-11-09T13:52:03Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-08T06:12:04.155226Z"}],"ghsa":[{"id":"GHSA-gg47-62fq-vrhp","title":"rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli...","description":"rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output size but accepts an input-selected large history window. Malicious peers can send a certificate with a five-byte Brotli header requesting up to 1 GiB before authentication, aborting Brotli-enabled clients or client-authenticating servers whose allocator cannot satisfy the request.","status":"published","published":"2026-11-08T03:30:37Z","modified":"2026-11-08T03:30:44Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-770"],"updated_at":"2026-11-08T03:41:54.072675Z"},{"id":"GHSA-h2v8-394m-p7vv","title":"Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication.","description":"### Summary\n\nThe built-in (but disabled by default) Brotli certificate decoder bounds the output buffer but accepts an input-selected history window. A header of five bytes can specify a 1 GiB window allocation. A peer can abort a process whose allocator cannot satisfy that request. A client must enable Brotli and connect to the peer; a server must enable Brotli and request a client certificate. Neither direction requires a trusted attacker certificate.\n\n### Details\n\nrustls calls `BrotliDecompress` which enables Brotli's large-window extension. rustls applies a limit to certificates, but this applies to the decompressed result, and not to any internal allocations the process requires.\n\n### Impact\n\nClient applications that enable the `brotli` feature will be vulnerable to malicious servers. Server applications that enable the `brotli` feature and enable client authentication will be vulnerable to malicious clients.\n\nPotential for denial of service due to memory exhaustion from peers sending malicious Brotli-encoded certificates, for applications that enable Brotli decompression.\n\n### Acknowledgement\nThanks to OpenAI [OutboundDisclosures@openai.com](mailto:OutboundDisclosures@openai.com) for the disclosure.","status":"published","published":"2026-10-27T16:08:36Z","modified":"2026-10-27T16:08:36Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:41:37.912288Z"}],"nvd":[{"id":"CVE-2026-123610","description":"rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output size but accepts an input-selected large history window. Malicious peers can send a certificate with a five-byte Brotli header requesting up to 1 GiB before authentication, aborting Brotli-enabled clients or client-authenticating servers whose allocator cannot satisfy the request.","status":"published","published":"2026-11-08T02:16:56.267Z","modified":"2026-11-12T21:30:23.87Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"}],"cwes":["CWE-770"],"updated_at":"2026-11-09T16:14:55.503615Z"}],"osv":[{"id":"CVE-2026-123610","title":"rustls before 0.23.46 Denial of Service via Brotli Certificate Decompression","description":"rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output size but accepts an input-selected large history window. Malicious peers can send a certificate with a five-byte Brotli header requesting up to 1 GiB before authentication, aborting Brotli-enabled clients or client-authenticating servers whose allocator cannot satisfy the request.","status":"published","published":"2026-11-08T01:38:35.478Z","modified":"2026-11-11T02:30:49.038329651Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-770"],"updated_at":"2026-11-08T11:04:05.022583Z"},{"id":"DEBIAN-CVE-2026-123610","description":"rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output size but accepts an input-selected large history window. Malicious peers can send a certificate with a five-byte Brotli header requesting up to 1 GiB before authentication, aborting Brotli-enabled clients or client-authenticating servers whose allocator cannot satisfy the request.","status":"published","published":"2026-11-08T02:16:56.267Z","modified":"2026-11-10T10:00:26.645580672Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"updated_at":"2026-11-10T10:26:30.347596Z"},{"id":"GHSA-h2v8-394m-p7vv","title":"Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication.","description":"### Summary\n\nThe built-in (but disabled by default) Brotli certificate decoder bounds the output buffer but accepts an input-selected history window. A header of five bytes can specify a 1 GiB window allocation. A peer can abort a process whose allocator cannot satisfy that request. A client must enable Brotli and connect to the peer; a server must enable Brotli and request a client certificate. Neither direction requires a trusted attacker certificate.\n\n### Details\n\nrustls calls `BrotliDecompress` which enables Brotli's large-window extension. rustls applies a limit to certificates, but this applies to the decompressed result, and not to any internal allocations the process requires.\n\n### Impact\n\nClient applications that enable the `brotli` feature will be vulnerable to malicious servers. Server applications that enable the `brotli` feature and enable client authentication will be vulnerable to malicious clients.\n\nPotential for denial of service due to memory exhaustion from peers sending malicious Brotli-encoded certificates, for applications that enable Brotli decompression.\n\n### Acknowledgement\nThanks to OpenAI [OutboundDisclosures@openai.com](mailto:OutboundDisclosures@openai.com) for the disclosure.","status":"published","published":"2026-10-27T16:08:36Z","modified":"2026-11-08T10:55:59.261359726Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-770"],"updated_at":"2026-11-08T11:04:05.022583Z"},{"id":"RUSTSEC-2026-0348","title":"Brotli certificate decompression can allocate up to 1 GiB before authentication","description":"The built-in Brotli certificate decompressor (enabled by the non-default\n`brotli` crate feature) bounded the size of the decompressed output, but\naccepted a peer-selected history window. Brotli's large-window extension was\nenabled, so a five-byte header could cause an allocation of 1 GiB. A peer can\nabort a process whose allocator cannot satisfy that request.\n\nNo trusted certificate is required by the attacker. Affected configurations are:\n\n- clients that enable the `brotli` feature and connect to a malicious server, and\n- servers that enable the `brotli` feature and request client certificates.\n\nApplications that do not enable the `brotli` feature are not affected.","status":"published","published":"2026-10-14T12:00:00Z","modified":"2026-11-09T09:21:20Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-08T11:04:05.022583Z"},{"id":"UBUNTU-CVE-2026-123610","description":"rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output size but accepts an input-selected large history window. Malicious peers can send a certificate with a five-byte Brotli header requesting up to 1 GiB before authentication, aborting Brotli-enabled clients or client-authenticating servers whose allocator cannot satisfy the request.","status":"published","published":"2026-11-09T00:00:00Z","modified":"2026-11-10T02:50:22.250957297Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"},{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-10T03:18:58.105788Z"},{"id":"AZL-113164","title":"CVE-2026-123610 affecting package kata-containers 4.1.0.kata1-2","description":"rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output size but accepts an input-selected large history window. Malicious peers can send a certificate with a five-byte Brotli header requesting up to 1 GiB before authentication, aborting Brotli-enabled clients or client-authenticating servers whose allocator cannot satisfy the request.","status":"published","published":"2026-11-08T02:16:56Z","modified":"2026-11-11T14:17:32.32747478Z","updated_at":"2026-11-11T14:42:54.020399Z"},{"id":"AZL-113176","title":"CVE-2026-123610 affecting package kata-containers-cc 3.15.0.aks0-23","description":"rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output size but accepts an input-selected large history window. Malicious peers can send a certificate with a five-byte Brotli header requesting up to 1 GiB before authentication, aborting Brotli-enabled clients or client-authenticating servers whose allocator cannot satisfy the request.","status":"published","published":"2026-11-08T02:16:56Z","modified":"2026-11-11T14:17:32.27562361Z","updated_at":"2026-11-11T14:42:54.020399Z"},{"id":"AZL-113275","title":"CVE-2026-123610 affecting package rust 1.75.0-31","description":"rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output size but accepts an input-selected large history window. Malicious peers can send a certificate with a five-byte Brotli header requesting up to 1 GiB before authentication, aborting Brotli-enabled clients or client-authenticating servers whose allocator cannot satisfy the request.","status":"published","published":"2026-11-08T02:16:56Z","modified":"2026-11-11T14:17:32.735547209Z","updated_at":"2026-11-11T14:42:54.020399Z"},{"id":"AZL-113278","title":"CVE-2026-123610 affecting package rust 1.98.1-1","description":"rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output size but accepts an input-selected large history window. Malicious peers can send a certificate with a five-byte Brotli header requesting up to 1 GiB before authentication, aborting Brotli-enabled clients or client-authenticating servers whose allocator cannot satisfy the request.","status":"published","published":"2026-11-08T02:16:56Z","modified":"2026-11-11T14:17:32.18382091Z","updated_at":"2026-11-11T14:42:54.020399Z"},{"id":"AZL-113302","title":"CVE-2026-123610 affecting package rust-afterburn 5.8.2-2","description":"rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output size but accepts an input-selected large history window. Malicious peers can send a certificate with a five-byte Brotli header requesting up to 1 GiB before authentication, aborting Brotli-enabled clients or client-authenticating servers whose allocator cannot satisfy the request.","status":"published","published":"2026-11-08T02:16:56Z","modified":"2026-11-11T14:17:32.832450789Z","updated_at":"2026-11-11T14:42:54.020399Z"}]}}