CVE-2026-6107.json is missing from 2026-04-12_delta_CVEs_at_end_of_day.zip

[Sanchez-Isabel]

CVE-2026-6107 was published on April 12, 2026, but the CVE-2026-6107.json file is not included in the 2026-04-12_delta_CVEs_at_end_of_day.zip archive. Why is that?

[M-nj]

• Delta at end of day action uses UTC timezone.

• CVE-2026-6107 was published to cve services at `"datePublished": "2026-04-12T00:45:18.908Z",

• CVE-2026-6107 made it into the cvelistV5 repo in commit 38e0ccc (2026-04-12T01:02:24.000Z)

• 

• commit 38e0ccc is tagged with 2026-04-12_delta_CVEs_at_end_of_day

• CVE-2026-6107 should appear in the 2026-04-12_delta_CVEs_at_end_of_day.zip.

• CVE-2026-6107 is not in 2026-04-12_delta_CVEs_at_end_of_day.zip.

• Delta action started @ 2026-04-13T00:46:19Z and was built from commit 707a847

CVE Utils version 1.2.0
  starting 'delta' command...
  local  : 2026-04-12 8:46:17 PM Eastern Daylight Time
  ISO    : 2026-04-13T00:46:17.263Z
...
delta command options:  
{
  "start": "2026-04-13T00:00:00.000Z",
  "yesterdayAll": true
}

...
building new delta of cves from 2026-04-12T00:00:00.000Z to 2026-04-12T23:59:59.999Z

• did not find CVE-2026-6107 nor CVE-2026-6108 in 2026-04-12_delta_CVEs_at_end_of_day.zip nor in logs!
• did find CVE-2026-6109, published 1 hour later.

Suspected rounding issue with how minutes and seconds are handled somewhere in the delta code?
@hkong @hkong-mitre