{"metadata": {"vulnerability": "CVE-2022-40127", "count": 47, "kinds": {"milestone": 6, "sighting": 23, "kev": 0, "other": 18}}, "data": [{"timestamp": "2022-09-06T00:00:00Z", "date_only": false, "value": "2022-09-06T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-40127", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-11-14T00:00:00Z", "date_only": true, "value": "2022-11-14", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2022-40127", "record": "GSD-2022-40127", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2022-11-14T00:00:00Z", "date_only": false, "value": "2022-11-14T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-40127", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-11-14T00:00:00Z", "date_only": false, "value": "2022-11-14T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2022-40127", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-11-14T10:15:00Z", "date_only": false, "value": "2022-11-14T10:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6PW3-8H9W-32GC", "record": "GHSA-6PW3-8H9W-32GC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-11-14T10:15:00Z", "date_only": false, "value": "2022-11-14T10:15:00Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2022-42982", "record": "PYSEC-2022-42982", "field": "published"}, {"timestamp": "2022-11-14T10:15:00Z", "date_only": false, "value": "2022-11-14T10:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-40127", "record": "GSD-2022-40127", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-11-14T10:15:10.293Z", "date_only": false, "value": "2022-11-14T10:15:10.293", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-40127", "record": "FKIE_CVE-2022-40127", "field": "published"}, {"timestamp": "2022-11-14T12:00:15Z", "date_only": false, "value": "2022-11-14T12:00:15Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6PW3-8H9W-32GC", "record": "GHSA-6PW3-8H9W-32GC", "field": "published"}, {"timestamp": "2022-11-16T00:00:00Z", "date_only": true, "value": "2022-11-16", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-40127", "record": "GSD-2022-40127", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2022-11-16T18:53:00Z", "date_only": false, "value": "2022-11-16T18:53Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-40127", "record": "GSD-2022-40127", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-11-17T00:00:00Z", "date_only": true, "value": "2022-11-17", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-78862", "record": "CNVD-2022-78862", "field": "submitTime"}, {"timestamp": "2022-11-19T13:07:01Z", "date_only": false, "value": "2022-11-19T13:07:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/7200", "record": "CVE-2022-40127", "field": "creation_timestamp", "uuid": "95cd6b66-052d-47f3-8cc0-9aa9e39dd78d", "content": "#exploit\n1. CVE-2022-40127:\nApache Airflow <2.4.0 DAG example_bash_operator RCE\nhttps://github.com/Mr-xn/CVE-2022-40127\n\n2. Chromium V8 Engine Exploits\nhttps://github.com/anvbis/chrome.v8.n-days", "url": "https://t.me/CyberSecurityTechnologies/7200"}, {"timestamp": "2022-11-19T15:29:51Z", "date_only": false, "value": "2022-11-19T15:29:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/intelexch/34113", "record": "CVE-2022-40127", "field": "creation_timestamp", "uuid": "4e971875-a0eb-4752-8e03-a1c0a126f65f", "content": "https://github.com/Mr-xn/CVE-2022-40127", "url": "https://t.me/intelexch/34113"}, {"timestamp": "2022-11-20T22:47:46Z", "date_only": false, "value": "2022-11-20T22:47:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/1424", "record": "CVE-2022-40127", "field": "creation_timestamp", "uuid": "59cf9529-74f9-45dd-aa90-00a29886a322", "content": "https://github.com/Mr-xn/CVE-2022-40127", "url": "https://t.me/crackcodes/1424"}, {"timestamp": "2022-11-21T00:00:00Z", "date_only": true, "value": "2022-11-21", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-78862", "record": "CNVD-2022-78862", "field": "openTime"}, {"timestamp": "2022-11-24T13:01:10Z", "date_only": false, "value": "2022-11-24T13:01:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/10482", "record": "CVE-2022-40127", "field": "creation_timestamp", "uuid": "a78411ef-1c69-4b7a-ad65-544ca5447a77", "content": "\u25a0\u25a1\u25a1\u25a1\u25a1 Apache Airflow < 2.4.0 DAG example_bash_operator RCE POC.\n\nhttps://github.com/Mr-xn/CVE-2022-40127", "url": "https://t.me/cKure/10482"}, {"timestamp": "2023-01-05T19:31:50Z", "date_only": false, "value": "2023-01-05T19:31:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ctinow/85158", "record": "CVE-2022-40127", "field": "creation_timestamp", "uuid": "e4acc017-a683-4ef4-a703-d3ddb6da13ef", "content": "Internet Bug Bounty: CVE-2022-40127: RCE in Apache Airflow <2.4.0 bash example\n\nhttps://ift.tt/K1mhCXI", "url": "https://t.me/ctinow/85158"}, {"timestamp": "2023-05-04T04:29:22.645Z", "date_only": false, "value": "2023-05-04T04:29:22.645854Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2022-42982", "record": "PYSEC-2022-42982", "field": "modified"}, {"timestamp": "2023-12-13T01:19:31.030Z", "date_only": false, "value": "2023-12-13T01:19:31.030300Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-40127", "record": "GSD-2022-40127", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-06T10:57:35.470Z", "date_only": false, "value": "2024-03-06T10:57:35.470Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-AIRFLOW-2022-40127", "record": "BIT-AIRFLOW-2022-40127", "field": "published"}, {"timestamp": "2024-08-03T12:14:39.589Z", "date_only": false, "value": "2024-08-03T12:14:39.589Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-40127", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-30T18:58:19.200Z", "date_only": false, "value": "2025-04-30T18:58:19.200830Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-40127", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-04-30T18:58:19.200Z", "date_only": false, "value": "2025-04-30T18:58:19.200830Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-40127", "record": "FKIE_CVE-2022-40127", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-30T18:58:45.160Z", "date_only": false, "value": "2025-04-30T18:58:45.160Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-40127", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-30T18:58:45.160Z", "date_only": false, "value": "2025-04-30T18:58:45.160Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-40127", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-30T19:13:45Z", "date_only": false, "value": "2025-04-30T19:13:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14131", "record": "CVE-2022-40127", "field": "creation_timestamp", "uuid": "b6e90f2e-c54b-4c64-a708-1525d61ca0ca", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40127\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided run_id parameter. This issue affects Apache Airflow Apache Airflow versions prior to 2.4.0.\n\ud83d\udccf Published: 2022-11-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-30T18:58:45.160Z\n\ud83d\udd17 References:\n1. https://github.com/apache/airflow/pull/25960\n2. https://lists.apache.org/thread/cf132hgm6jvzvsbpsozl3plf1r4cwysy\n3. http://www.openwall.com/lists/oss-security/2022/11/14/2", "url": "https://t.me/DarkWebInformer_CVEAlerts/14131"}, {"timestamp": "2025-05-01T13:29:01Z", "date_only": false, "value": "2025-05-01T13:29:01Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6PW3-8H9W-32GC", "record": "GHSA-6PW3-8H9W-32GC", "field": "modified"}, {"timestamp": "2026-06-17T05:00:58.767Z", "date_only": false, "value": "2026-06-17T05:00:58.767", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-40127", "record": "FKIE_CVE-2022-40127", "field": "lastModified"}, {"timestamp": "2026-07-29T12:00:10.069Z", "date_only": false, "value": "2026-07-29T12:00:10.069715Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/18290", "record": "CVE-2022-40127", "field": "creation_timestamp", "uuid": "76a24bd6-5efd-47a8-8d0d-f92ca9a3377c", "url": "https://t.me/CVEhub/18290"}, {"timestamp": "2026-07-29T12:00:14.130Z", "date_only": false, "value": "2026-07-29T12:00:14.130517Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/17453", "record": "CVE-2022-40127", "field": "creation_timestamp", "uuid": "159dd7cd-9d56-47d9-9e9b-62ff00194ebd", "url": "https://t.me/CVEhub/17453"}, {"timestamp": "2026-07-29T12:00:54.323Z", "date_only": false, "value": "2026-07-29T12:00:54.323108Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/4927", "record": "CVE-2022-40127", "field": "creation_timestamp", "uuid": "f9f60c92-8a04-4363-b077-f83e2a7786e8", "url": "https://t.me/CVEhub/4927"}, {"timestamp": "2026-07-30T00:00:22.286Z", "date_only": false, "value": "2026-07-30T00:00:22.286736Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/18290", "record": "CVE-2022-40127", "field": "creation_timestamp", "uuid": "fc2fa283-22b1-48dc-8928-35197a528d11", "url": "https://t.me/CVEhub/18290"}, {"timestamp": "2026-07-30T00:00:32.480Z", "date_only": false, "value": "2026-07-30T00:00:32.480663Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/17453", "record": "CVE-2022-40127", "field": "creation_timestamp", "uuid": "4eb10800-19c1-4892-95fa-8857da9b0192", "url": "https://t.me/CVEhub/17453"}, {"timestamp": "2026-07-30T00:01:32.513Z", "date_only": false, "value": "2026-07-30T00:01:32.513062Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/4927", "record": "CVE-2022-40127", "field": "creation_timestamp", "uuid": "20f9cdb4-02ac-4e9e-81cb-7be0966d6236", "url": "https://t.me/CVEhub/4927"}, {"timestamp": "2026-07-31T00:00:44.609Z", "date_only": false, "value": "2026-07-31T00:00:44.609333Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/17453", "record": "CVE-2022-40127", "field": "creation_timestamp", "uuid": "05ab7a37-2128-4972-b0d7-52be65aaf828", "url": "https://t.me/CVEhub/17453"}, {"timestamp": "2026-07-31T21:00:04.213Z", "date_only": false, "value": "2026-07-31T21:00:04.213993Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/4927", "record": "CVE-2022-40127", "field": "creation_timestamp", "uuid": "8382ebe7-1ddf-4d48-90be-e2f88f0b14b6", "url": "https://t.me/CVEhub/4927"}, {"timestamp": "2026-08-01T00:00:12.645Z", "date_only": false, "value": "2026-08-01T00:00:12.645475Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/4927", "record": "CVE-2022-40127", "field": "creation_timestamp", "uuid": "3640f12f-c49c-4e8b-bd2b-fbab2354807c", "url": "https://t.me/CVEhub/4927"}, {"timestamp": "2026-09-01T20:00:52.620Z", "date_only": false, "value": "2026-09-01T20:00:52.620361Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/115465", "record": "CVE-2022-40127", "field": "creation_timestamp", "uuid": "ec2d3b2b-f54e-4bd5-9528-0061d9416ae7", "url": "https://t.me/hacking_Attack/115465"}, {"timestamp": "2026-09-01T20:00:52.676Z", "date_only": false, "value": "2026-09-01T20:00:52.676070Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/115467", "record": "CVE-2022-40127", "field": "creation_timestamp", "uuid": "2725ec1a-7788-4231-8019-9bf26f6dfb74", "url": "https://t.me/hacking_Attack/115467"}, {"timestamp": "2026-09-01T20:00:52.904Z", "date_only": false, "value": "2026-09-01T20:00:52.904042Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/115322", "record": "CVE-2022-40127", "field": "creation_timestamp", "uuid": "80793ab1-ffa3-41e9-a1bd-927755bc9f89", "url": "https://t.me/hacking_Attack/115322"}, {"timestamp": "2026-09-01T20:00:52.947Z", "date_only": false, "value": "2026-09-01T20:00:52.947919Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/115324", "record": "CVE-2022-40127", "field": "creation_timestamp", "uuid": "c2068147-0bd2-4392-9888-d92ee635fd25", "url": "https://t.me/hacking_Attack/115324"}, {"timestamp": "2026-09-04T09:00:04.614Z", "date_only": false, "value": "2026-09-04T09:00:04.614627Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/115467", "record": "CVE-2022-40127", "field": "creation_timestamp", "uuid": "25d36265-6753-43cc-8ac6-9335c338b0d2", "url": "https://t.me/hacking_Attack/115467"}, {"timestamp": "2026-09-04T09:00:04.669Z", "date_only": false, "value": "2026-09-04T09:00:04.669268Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/115465", "record": "CVE-2022-40127", "field": "creation_timestamp", "uuid": "84e743b6-ef11-4455-8164-9d54c704c796", "url": "https://t.me/hacking_Attack/115465"}, {"timestamp": "2026-09-04T10:00:05.723Z", "date_only": false, "value": "2026-09-04T10:00:05.723740Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/115324", "record": "CVE-2022-40127", "field": "creation_timestamp", "uuid": "cc123c1c-64f3-409b-97ea-61276a4b3add", "url": "https://t.me/hacking_Attack/115324"}, {"timestamp": "2026-09-04T10:00:05.767Z", "date_only": false, "value": "2026-09-04T10:00:05.767985Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/115322", "record": "CVE-2022-40127", "field": "creation_timestamp", "uuid": "0ae389a1-2685-4028-9c85-78a95f11a259", "url": "https://t.me/hacking_Attack/115322"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-AIRFLOW-2022-40127", "record": "BIT-AIRFLOW-2022-40127", "field": "modified"}]}