{
 "cna_to_ours": {
  "db_now": [
   "2026-10-05 20:35:16.821419+00",
   "2026-10-05 20:39:35.97751+00",
   "2026-10-05 20:39:59.741645+00",
   "2026-10-05 20:40:25.725657+00",
   "2026-10-05 20:40:39.903091+00",
   "2026-10-05 20:40:54.571763+00"
  ],
  "definition": "For each CVE row first written in the window by the MITRE cvelistV5 poller (its mitre_poll history row says first_seen) whose CNA datePublished is also in the window: cves.created_at minus cves.published (the CNA's datePublished, which the upsert never rewrites).",
  "excluded_published_before_window": 1,
  "excluded_rejected_or_reserved": 108,
  "minutes_after_cna_publication": {
   "max": 1434.7,
   "median": 8.8,
   "min": 0.3,
   "n": 13924,
   "p10": 3.5,
   "p25": 5.4,
   "p75": 13.2,
   "p90": 22.9,
   "unit": "minutes"
  },
  "minutes_when_created_by_nvd_poller": {
   "max": 0.9,
   "median": 0.5,
   "min": 0.4,
   "n": 4,
   "p10": 0.4,
   "p25": 0.4,
   "p75": 0.9,
   "p90": 0.9,
   "unit": "minutes"
  },
  "n_created_by": {
   "mitre": 13924,
   "neither": 61,
   "nvd": 4
  },
  "n_rows_created_in_window": 14098,
  "negative": 0,
  "over_24h": 0,
  "over_60_min": 397,
  "within_15_min": 11294,
  "within_60_min": 13527,
  "within_60_min_share": 97.1
 },
 "completeness": {
  "cvss_v3_distinct_from_v4": {
   "count": 11482,
   "n": 13990,
   "share": 82.1
  },
  "db_now": [
   "2026-10-05 20:34:27.462029+00",
   "2026-10-05 20:47:11.877753+00"
  ],
  "definition": "As of the query time, for every CVE row first written in the window (not REJECTED/RESERVED): whether it holds each field. No sampling.",
  "groups": {
   "all": {
    "fields": {
     "affected_packages": {
      "count": 4290,
      "share": 30.7
     },
     "any_cvss": {
      "count": 12768,
      "share": 91.3
     },
     "cvss_v4": {
      "count": 4225,
      "share": 30.2
     },
     "cwe": {
      "count": 12021,
      "share": 85.9
     },
     "eg_score_assessed": {
      "count": 12772,
      "share": 91.3
     },
     "epss": {
      "count": 13967,
      "share": 99.8
     },
     "exploit_refs": {
      "count": 80,
      "share": 0.6
     },
     "github_advisory": {
      "count": 13036,
      "share": 93.2
     },
     "product_vendor_advisory": {
      "count": 3088,
      "share": 22.1
     }
    },
    "n": 13990
   },
   "created_2026-09-28_or_later": {
    "fields": {
     "affected_packages": {
      "count": 662,
      "share": 26.1
     },
     "any_cvss": {
      "count": 2509,
      "share": 98.9
     },
     "cvss_v4": {
      "count": 1057,
      "share": 41.7
     },
     "cwe": {
      "count": 2506,
      "share": 98.8
     },
     "eg_score_assessed": {
      "count": 2513,
      "share": 99.1
     },
     "epss": {
      "count": 2525,
      "share": 99.5
     },
     "exploit_refs": {
      "count": 7,
      "share": 0.3
     },
     "github_advisory": {
      "count": 2333,
      "share": 92.0
     },
     "product_vendor_advisory": {
      "count": 275,
      "share": 10.8
     }
    },
    "n": 2537
   },
   "created_before_2026-09-28": {
    "fields": {
     "affected_packages": {
      "count": 3628,
      "share": 31.7
     },
     "any_cvss": {
      "count": 10259,
      "share": 89.6
     },
     "cvss_v4": {
      "count": 3168,
      "share": 27.7
     },
     "cwe": {
      "count": 9515,
      "share": 83.1
     },
     "eg_score_assessed": {
      "count": 10259,
      "share": 89.6
     },
     "epss": {
      "count": 11442,
      "share": 99.9
     },
     "exploit_refs": {
      "count": 73,
      "share": 0.6
     },
     "github_advisory": {
      "count": 10703,
      "share": 93.5
     },
     "product_vendor_advisory": {
      "count": 2813,
      "share": 24.6
     }
    },
    "n": 11453
   }
  }
 },
 "epss_lag": {
  "db_now": [
   "2026-10-05 20:41:06.701141+00"
  ],
  "definition": "For each FIRST score date D from 2026-09-05 to 2026-10-04: the first epss_batch row of the first fetcher run that applied D's values, minus the Last-Modified time of FIRST's epss_scores-D.csv.gz, in hours. A run's score date is the dated file whose values equal the run's sampled rows.",
  "fetcher_interval_hours": 24,
  "first_publish_time_range_utc": [
   "13:30:20",
   "13:30:24"
  ],
  "hours_after_first_published": {
   "max": 20.0,
   "median": 2.4,
   "min": 0.2,
   "n": 30,
   "p10": 0.2,
   "p25": 1.2,
   "p75": 6.9,
   "p90": 13.6,
   "unit": "hours"
  },
  "n_applied": 30,
  "n_score_dates": 30,
  "never_applied": [],
  "over_24h": 0,
  "over_6h": 10,
  "over_6h_cases": [
   {
    "first_published": "2026-09-08T13:30:22Z",
    "hours": 8.4,
    "ours": "2026-09-08T21:55:14Z",
    "score_date": "2026-09-08"
   },
   {
    "first_published": "2026-09-09T13:30:22Z",
    "hours": 19.9,
    "ours": "2026-09-10T09:23:44Z",
    "score_date": "2026-09-09"
   },
   {
    "first_published": "2026-09-10T13:30:21Z",
    "hours": 20.0,
    "ours": "2026-09-11T09:30:40Z",
    "score_date": "2026-09-10"
   },
   {
    "first_published": "2026-09-14T13:30:22Z",
    "hours": 13.6,
    "ours": "2026-09-15T03:04:17Z",
    "score_date": "2026-09-14"
   },
   {
    "first_published": "2026-09-15T13:30:26Z",
    "hours": 15.6,
    "ours": "2026-09-16T05:05:23Z",
    "score_date": "2026-09-15"
   },
   {
    "first_published": "2026-09-20T13:30:21Z",
    "hours": 6.6,
    "ours": "2026-09-20T20:08:05Z",
    "score_date": "2026-09-20"
   },
   {
    "first_published": "2026-09-21T13:30:22Z",
    "hours": 6.9,
    "ours": "2026-09-21T20:25:52Z",
    "score_date": "2026-09-21"
   },
   {
    "first_published": "2026-09-25T13:30:21Z",
    "hours": 10.8,
    "ours": "2026-09-26T00:19:47Z",
    "score_date": "2026-09-25"
   },
   {
    "first_published": "2026-10-01T13:30:21Z",
    "hours": 6.2,
    "ours": "2026-10-01T19:41:30Z",
    "score_date": "2026-10-01"
   },
   {
    "first_published": "2026-10-04T13:30:20Z",
    "hours": 9.7,
    "ours": "2026-10-04T23:14:54Z",
    "score_date": "2026-10-04"
   }
  ],
  "runs": 37,
  "runs_fully_matched": 37,
  "samples_matched": 3324,
  "samples_total": 3324,
  "time_share_by_days_behind": {
   "0": 78.6,
   "1": 21.4
  },
  "within_6h": 20
 },
 "evidence_dir": "docs/cve-freshness/evidence/2026-10-05",
 "kev_latency": {
  "catalog_versions_read": 32,
  "day_resolution": {
   "earlier": 0,
   "later": 3,
   "next_day": 0,
   "not_recorded": 0,
   "same_day": 36
  },
  "db_now": [
   "2026-10-05 20:34:07.626622+00"
  ],
  "definition": "For each entry in CISA's catalog with dateAdded in 2026-09-05..2026-10-04: our first kev_newly_listed history row against CISA's dateReleased of the first catalog version listing it (from CISA's public mirror, github.com/cisagov/kev-data), in minutes; and, at CISA's own date resolution, our UTC date against dateAdded.",
  "first_seen_table_agrees": 39,
  "latest_catalog_version": "2026.10.04",
  "minutes_after_cisa_release": {
   "max": 4312.1,
   "median": 26.2,
   "min": 6.7,
   "n": 36,
   "p10": 7.6,
   "p25": 20.7,
   "p75": 37.3,
   "p90": 55.3,
   "unit": "minutes"
  },
  "n": 39,
  "n_recorded": 39,
  "over_6h": 3,
  "over_6h_cases": [
   {
    "cisa_released": "2026-09-11T19:32:16.8993Z",
    "cve_id": "CVE-2026-85706",
    "cve_row_created": "2026-09-12T02:53:24Z",
    "date_added": "2026-09-11",
    "hours": 71.9,
    "minutes": 4312.1,
    "ours": "2026-09-14T19:24:22Z"
   },
   {
    "cisa_released": "2026-09-16T18:10:24.6555Z",
    "cve_id": "CVE-2026-76460",
    "cve_row_created": "2026-09-16T20:29:07Z",
    "date_added": "2026-09-16",
    "hours": 44.1,
    "minutes": 2644.8,
    "ours": "2026-09-18T14:15:09Z"
   },
   {
    "cisa_released": "2026-09-16T18:47:50.6796Z",
    "cve_id": "CVE-2026-87886",
    "cve_row_created": "2026-09-17T23:04:47Z",
    "date_added": "2026-09-16",
    "hours": 43.5,
    "minutes": 2607.3,
    "ours": "2026-09-18T14:15:09Z"
   }
  ],
  "over_6h_cve_row_written_after_release": 3,
  "release_not_mirrored": [
   {
    "cve_id": "CVE-2026-42016",
    "date_added": "2026-09-11",
    "first_listing_mirrored_release": "2026-09-11T19:32:16.8993Z",
    "latency_upper_bound_minutes": 189.9,
    "ours": "2026-09-11T18:49:47Z",
    "previous_mirrored_release": "2026-09-11T15:39:54Z"
   },
   {
    "cve_id": "CVE-2026-42018",
    "date_added": "2026-09-11",
    "first_listing_mirrored_release": "2026-09-11T19:32:16.8993Z",
    "latency_upper_bound_minutes": 189.9,
    "ours": "2026-09-11T18:49:47Z",
    "previous_mirrored_release": "2026-09-11T15:39:54Z"
   },
   {
    "cve_id": "CVE-2026-84869",
    "date_added": "2026-09-11",
    "first_listing_mirrored_release": "2026-09-11T19:32:16.8993Z",
    "latency_upper_bound_minutes": 189.9,
    "ours": "2026-09-11T18:49:47Z",
    "previous_mirrored_release": "2026-09-11T15:39:54Z"
   }
  ],
  "same_day_share_of_recorded": 92.3,
  "within_60_min": 33,
  "within_60_min_share": 91.7
 },
 "measured_date": "2026-10-05",
 "method_doc": "docs/cve-freshness/cve-freshness-2026-10-05.md",
 "pre_nvd_lead": {
  "counts": {
   "not_held": 0,
   "nvd_first": 444,
   "ours_first": 13771
  },
  "db_now": [
   "2026-10-05 20:36:54.04053+00",
   "2026-10-05 20:37:26.276497+00",
   "2026-10-05 20:38:06.918979+00",
   "2026-10-05 20:38:39.115847+00",
   "2026-10-05 20:39:04.695094+00",
   "2026-10-05 20:39:23.299686+00"
  ],
  "definition": "For each CVE NVD's API 2.0 lists as published in the window (not Rejected): lead = NVD published minus our cves.created_at, the time we first wrote the row.",
  "lag_minutes_when_nvd_first": {
   "max": 1.7,
   "median": 0.4,
   "min": 0.0,
   "n": 444,
   "p10": 0.1,
   "p25": 0.2,
   "p75": 0.6,
   "p90": 1.1,
   "unit": "minutes"
  },
  "lead_minutes_when_ours_first": {
   "max": 150019.8,
   "median": 38.6,
   "min": 0.0,
   "n": 13771,
   "p10": 14.0,
   "p25": 23.2,
   "p75": 51.2,
   "p90": 57.1,
   "unit": "minutes"
  },
  "n": 14215,
  "n_held": 14215,
  "nvd_first_over_60_min": 0,
  "nvd_listing": {
   "excluded_outside_half_open_window": 0,
   "excluded_rejected": 121,
   "fetched_at": "2026-10-05T20:29:42Z",
   "total_results": 14336
  },
  "ours_first_over_24h": 274,
  "ours_first_share_of_held": 96.9,
  "row_created_by": {
   "mitre": 13921,
   "neither": 290,
   "nvd": 4
  }
 },
 "schema": "cve-freshness-evidence/1",
 "thresholds": {
  "cna_fast_minutes": 15,
  "cna_slow_minutes": 60,
  "epss_slow_hours": 6,
  "kev_fast_minutes": 60,
  "kev_slow_hours": 6,
  "lead_long_hours": 24,
  "nvd_first_slow_minutes": 60
 },
 "window": {
  "days": 30,
  "end": "2026-10-05T00:00:00Z",
  "start": "2026-09-05T00:00:00Z"
 }
}