{"metadata": {"vulnerability": "CVE-2024-3568", "count": 28, "kinds": {"milestone": 10, "sighting": 2, "kev": 0, "other": 16}}, "data": [{"timestamp": "2024-04-10T09:52:12.519Z", "date_only": false, "value": "2024-04-10T09:52:12.519Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-3568", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-04-10T17:07:55.667Z", "date_only": false, "value": "2024-04-10T17:07:55.667Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-3568", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-04-10T17:15:58Z", "date_only": false, "value": "2024-04-10T17:15:58Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-37Q5-V5QM-C9V8", "record": "GHSA-37Q5-V5QM-C9V8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-04-10T17:15:58.160Z", "date_only": false, "value": "2024-04-10T17:15:58.160", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-3568", "record": "FKIE_CVE-2024-3568", "field": "published"}, {"timestamp": "2024-04-10T17:15:58.160Z", "date_only": false, "value": "2024-04-10T17:15:58.160", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2024-3568", "record": "GSD-2024-3568", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2024-04-10T18:30:48Z", "date_only": false, "value": "2024-04-10T18:30:48Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-37Q5-V5QM-C9V8", "record": "GHSA-37Q5-V5QM-C9V8", "field": "published"}, {"timestamp": "2024-04-10T19:49:51.183Z", "date_only": false, "value": "2024-04-10T19:49:51.183", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-3568", "record": "GSD-2024-3568", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-04-10T22:20:56Z", "date_only": false, "value": "2024-04-10T22:20:56Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-37Q5-V5QM-C9V8", "record": "GHSA-37Q5-V5QM-C9V8", "field": "modified"}, {"timestamp": "2024-04-11T05:03:27.225Z", "date_only": false, "value": "2024-04-11T05:03:27.225234Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-3568", "record": "GSD-2024-3568", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-04-12T06:38:55Z", "date_only": false, "value": "2024-04-12T06:38:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/4542", "record": "CVE-2024-3568", "field": "creation_timestamp", "uuid": "c6dbde6f-459c-4fb5-aec0-d503ae2d73fb", "content": "#ExploitObserverAlert\n\nCVE-2024-3568\n\nDESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-3568. The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the `load_repo_checkpoint()` function of the `TFPreTrainedModel()` class. Attackers can execute arbitrary code and commands by crafting a malicious serialized payload, exploiting the use of `pickle.load()` on data from potentially untrusted sources. This vulnerability allows for remote code execution (RCE) by deceiving victims into loading a seemingly harmless checkpoint during a normal training process, thereby enabling attackers to execute arbitrary code on the targeted machine.\n\nFIRST-EPSS: 0.000430000\nARPS-EXPLOITABILITY: 0.5780347", "url": "https://t.me/arpsyndicate/4542"}, {"timestamp": "2024-04-16T11:10:23.437Z", "date_only": false, "value": "2024-04-16T11:10:23.437Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / @huntr_ai", "record": "CVE-2024-3568", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-05-14T17:57:26.600Z", "date_only": false, "value": "2024-05-14T17:57:26.600369Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-3568", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-05-14T17:57:26.600Z", "date_only": false, "value": "2024-05-14T17:57:26.600369Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-3568", "record": "FKIE_CVE-2024-3568", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-06-04T17:31:01.009Z", "date_only": false, "value": "2024-06-04T17:31:01.009Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-3568", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-01T20:12:07.859Z", "date_only": false, "value": "2024-08-01T20:12:07.859Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-3568", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-01T20:12:07.859Z", "date_only": false, "value": "2024-08-01T20:12:07.859Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-3568", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-12T00:00:00Z", "date_only": true, "value": "2024-08-12", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0670", "record": "CERTFR-2024-AVI-0670", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-08-13T00:00:00Z", "date_only": false, "value": "2024-08-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0670", "record": "CERTFR-2024-AVI-0670", "field": "last_revision_date"}, {"timestamp": "2024-08-13T00:00:00Z", "date_only": false, "value": "2024-08-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0670", "record": "CERTFR-2024-AVI-0670", "field": "initial_release_date"}, {"timestamp": "2024-08-13T00:00:00Z", "date_only": false, "value": "2024-08-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0670", "record": "CERTFR-2024-AVI-0670", "field": "revisions.0.revision_date"}, {"timestamp": "2025-08-18T18:40:36Z", "date_only": false, "value": "2025-08-18T18:40:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/mldangelo/5e56cdbad7c30d817af60936c4d1fd0b", "record": "CVE-2024-3568", "field": "creation_timestamp", "uuid": "6ed7ef44-a54d-492b-8f9b-a201a279c3a3", "url": "https://gist.github.com/mldangelo/5e56cdbad7c30d817af60936c4d1fd0b"}, {"timestamp": "2026-06-17T07:44:32.020Z", "date_only": false, "value": "2026-06-17T07:44:32.020", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-3568", "record": "FKIE_CVE-2024-3568", "field": "lastModified"}, {"timestamp": "2026-07-07T11:45:37.939Z", "date_only": false, "value": "2026-07-07T11:45:37.939935Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-1978", "record": "PYSEC-2026-1978", "field": "published"}, {"timestamp": "2026-07-07T17:25:42.670Z", "date_only": false, "value": "2026-07-07T17:25:42.670492Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-1978", "record": "PYSEC-2026-1978", "field": "modified"}, {"timestamp": "2026-08-13T17:14:17Z", "date_only": false, "value": "2026-08-13T17:14:17Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-MLX-LM-CVE-2024-3568", "record": "BREW-MLX-LM-CVE-2024-3568", "field": "published"}, {"timestamp": "2026-08-13T17:32:07Z", "date_only": false, "value": "2026-08-13T17:32:07Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-RAPID-MLX-CVE-2024-3568", "record": "BREW-RAPID-MLX-CVE-2024-3568", "field": "published"}, {"timestamp": "2026-09-10T00:32:14Z", "date_only": false, "value": "2026-09-10T00:32:14Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-MLX-LM-CVE-2024-3568", "record": "BREW-MLX-LM-CVE-2024-3568", "field": "modified"}, {"timestamp": "2026-09-10T20:37:33Z", "date_only": false, "value": "2026-09-10T20:37:33Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-RAPID-MLX-CVE-2024-3568", "record": "BREW-RAPID-MLX-CVE-2024-3568", "field": "modified"}]}