{"metadata": {"vulnerability": "CVE-2024-41127", "count": 12, "kinds": {"milestone": 3, "sighting": 3, "kev": 0, "other": 6}}, "data": [{"timestamp": "2024-07-15T15:53:28.323Z", "date_only": false, "value": "2024-07-15T15:53:28.323Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-41127", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-08-02T14:46:21.941Z", "date_only": false, "value": "2024-08-02T14:46:21.941Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-41127", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-08-02T14:46:21.941Z", "date_only": false, "value": "2024-08-02T14:46:21.941Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2024-41127", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-02T15:16:36.503Z", "date_only": false, "value": "2024-08-02T15:16:36.503", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-41127", "record": "FKIE_CVE-2024-41127", "field": "published"}, {"timestamp": "2024-08-02T16:48:39.585Z", "date_only": false, "value": "2024-08-02T16:48:39.585270Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-41127", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-08-02T16:48:39.585Z", "date_only": false, "value": "2024-08-02T16:48:39.585270Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-41127", "record": "FKIE_CVE-2024-41127", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-08-02T16:52:08.440Z", "date_only": false, "value": "2024-08-02T16:52:08.440Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-41127", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-02T16:52:08.440Z", "date_only": false, "value": "2024-08-02T16:52:08.440Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-41127", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-02T18:11:56Z", "date_only": false, "value": "2024-08-02T18:11:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/2354", "record": "CVE-2024-41127", "field": "creation_timestamp", "uuid": "abfaf25a-f202-4cfd-a035-b83e1c7f2234", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-41127 - Monkeytype Code Injection Vulnerability (Pipeline Execution)\", \n  \"Content\": \"CVE ID : CVE-2024-41127 \nPublished : Aug. 2, 2024, 3:16 p.m. | 42\u00a0minutes ago \nDescription : Monkeytype is a minimalistic and customizable typing test. Monkeytype is vulnerable to Poisoned Pipeline Execution through Code Injection in its ci-failure-comment.yml GitHub Workflow, enabling attackers to gain pull-requests write access. The ci-failure-comment.yml workflow is triggered when the Monkey CI workflow completes. When it runs, it will download an artifact uploaded by the triggering workflow and assign the contents of ./pr_num/pr_num.txt artifact to the steps.pr_num_reader.outputs.content WorkFlow variable. It is not validated that the variable is actually a number and later it is interpolated into a JS script allowing an attacker to change the code to be executed. This issue leads to pull-requests write access. This vulnerability is fixed in 24.30.0. \nSeverity: 8.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/2354"}, {"timestamp": "2026-06-17T07:47:19.813Z", "date_only": false, "value": "2026-06-17T07:47:19.813", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-41127", "record": "FKIE_CVE-2024-41127", "field": "lastModified"}, {"timestamp": "2026-09-02T01:00:15.111Z", "date_only": false, "value": "2026-09-02T01:00:15.111865Z", "kind": "sighting", "label": "Seen", "source": "Telegram/1rxP3qIuireobzlbCghqLtlBEvOO40pQENYobB1-OKe51is", "record": "CVE-2024-41127", "field": "creation_timestamp", "uuid": "0d02d9af-62d8-41ad-bb7e-2791780bd7ce"}, {"timestamp": "2026-09-03T00:00:38.912Z", "date_only": false, "value": "2026-09-03T00:00:38.912598Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/1rxP3qIuireobzlbCghqLtlBEvOO40pQENYobB1-OKe51is", "record": "CVE-2024-41127", "field": "creation_timestamp", "uuid": "0e5457e4-1de2-4570-87ea-1ae674eb2379"}]}