Evidence row 74389

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://bess-x402.onrender.com/v1/security/kev"
    ]
  ],
  "name": "bess-x402.onrender.com/v1/security/kev",
  "owner_address": "0x1129a6bb9c6165ff07fdc509c107b522ca0e1871",
  "raw": {
    "accepts": [
      {
        "amount": "2000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:8453",
        "payTo": "0x1129A6BB9C6165FF07fdC509c107B522CA0e1871",
        "scheme": "exact"
      },
      {
        "amount": "2000",
        "asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:137",
        "payTo": "0x1129A6BB9C6165FF07fdC509c107B522CA0e1871",
        "scheme": "exact"
      },
      {
        "amount": "2000",
        "asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:42161",
        "payTo": "0x1129A6BB9C6165FF07fdC509c107B522CA0e1871",
        "scheme": "exact"
      }
    ],
    "description": "Check CVEs against CISA's Known Exploited Vulnerabilities catalog or search it by vendor/product: date added, remediation due date, ransomware use, CWE and required action. Use to prioritise patching.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "queryParams": {
              "days": 30,
              "limit": 3
            },
            "type": "http"
          },
          "output": {
            "example": {
              "catalog_size": 1756,
              "catalog_version": "2026.10.23",
              "in_catalog": null,
              "matches": 30,
              "source": "CISA Known Exploited Vulnerabilities catalog (CC0)",
              "vulnerabilities": [
                {
                  "added": "2026-10-23",
                  "cve": "CVE-2026-114625",
                  "cwes": [
                    "CWE-89"
                  ],
                  "description": "Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data mana...",
                  "due": "2026-10-26",
                  "name": "Arista VeloCloud Orchestrator SQL Injection Vulnerability",
                  "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-114625",
                  "product": "VeloCloud Orchestrator",
                  "ransomware_use": "Unknown",
                  "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discon...",
                  "vendor": "Arista"
                },
                {
                  "added": "2026-10-23",
                  "cve": "CVE-2026-110447",
                  "cwes": [
                    "CWE-78"
                  ],
                  "description": "Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running.",
                  "due": "2026-10-26",
                  "name": "Collabora Online – Built-in CODE Server OS Command Injection Vulnerability",
                  "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-110447",
                  "product": "Collabora Online – Built-in CODE Server",
                  "ransomware_use": "Unknown",
                  "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discon...",
                  "vendor": "Collabora"
                }
              ]
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET",
                    "HEAD",
                    "DELETE"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "properties": {
                    "cve": {
                      "description": "CVE id, e.g. CVE-2021-44228",
                      "type": "string"
                    },
                    "days": {
                      "description": "Only entries added in the last N days",
                      "type": "integer"
                    },
                    "limit": {
                      "description": "Maximum number of results (1-100)",
                      "type": "integer"
                    },
                    "q": {
                      "description": "Vendor or product words, e.g. fortinet",
                      "type": "string"
                    },
                    "ransomware": {
                      "description": "Only known ransomware use",
                      "type": "boolean"
                    }
                  },
                  "required": [],
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-10-26T02:30:10.032Z",
    "quality": {
      "l30DaysTotalCalls": 1,
      "l30DaysUniquePayers": 1,
      "lastCalledAt": "2026-10-26T02:30:09.819Z"
    },
    "resource": "https://bess-x402.onrender.com/v1/security/kev",
    "tags": [
      "security",
      "cve",
      "vulnerabilities",
      "cisa",
      "patching"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Check CVEs against CISA's Known Exploited Vulnerabilities catalog or search it by vendor/product: date added, remediation due date, ransomware use, CWE and required action. Use to prioritise patching."
}

What the leaf hashes

{"body":"91e4685356969f52754acae859ed0f43f1611f2414ceb15943501780a231d3f5","id":74389,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793025489020273,"prev":71599,"subject":"x402_bazaar:https://bess-x402.onrender.com/v1/security/kev","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-26 (296695 rows).

1. 0x906b4421fe907aefe9b2243b34380c88136a71a0213876e2443bb151464ddf35
2. 0x695c48907acac93eb5cb631f18b1f7ef45524d9676f42b2e2cf0fa5bb3766950
3. 0xe71c20cb209d4e99e436dad3d2b280f520ab3dca6e091322b1b6dce59ebd01fa
4. 0xfff6df343c815305d74f511fb33af2f142bb10e176416194855b352812d7784e
5. 0x6d3e79f22b7bda36502a430cd5ae56370428b2b96bae1cfd0267e201c5cd9a81
6. 0xaa7af32db645befff8bdc6f2b085561a30c2577265232b19acb7f3174288002b
7. 0xeef91b85c038c66568f51d2d6a036beca2c6cf96fbd6b30e7e52c9de0c8e606c
8. 0x58de9b6833758e57469c9a5ff896a04ea3f44f5b285de4212ed47930bc56d276
9. 0x957ebc7023975d8dcec4401284c254f8b3fe230b729fef0aaf533a85e7cfd531
10. 0xaceb83c372739bd98e77173713a458afd2092803e86ac0b8b2afe3eb94ca90c0
11. 0xc41c5ee73cf254bf3fe8e9a8475b0931c3223f7331f30010bc3a5e2a753329d6
12. 0x4634efb8094d1dd2874013b832ad8653e49400f57bf98efdcc5f925ed08d0f5b
13. 0xc0cb184c9bdf71abcf18fda97bd59289153d120dbf8fee9f517b63bf303deb95
14. 0xf0edabbb9ba0d643e5505d19d07637eb6f6aed0a1c7356af43ae7d84ae9ef0c5
15. 0xf0bd63870f0bb378fa300bd33563050dcb7b3e02b44eb3ee550c1c534ec4b246
16. 0x1ac20d30773e1f4f2f811540e9a99b5cca9177c9e2e029acc0d80cf3f1d11f0f
17. 0xd21942ae3214eff88e08ab04884fd4b11958b51af9a0741b7668e2d07a2c56c9
18. 0x9a9024edb5069d88a324facb310a5ce8e495214bbaa968f077bede437390194f
19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a

Day root

0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8

Chained

0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a

Published

On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae