{"metadata": {"vulnerability": "CVE-2025-25290", "count": 23, "kinds": {"milestone": 8, "sighting": 5, "kev": 0, "other": 10}}, "data": [{"timestamp": "2025-02-06T17:13:33.122Z", "date_only": false, "value": "2025-02-06T17:13:33.122Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-25290", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-02-14T17:28:40Z", "date_only": false, "value": "2025-02-14T17:28:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/octokit/request.js/security/advisories/GHSA-rmvr-2pp2-xj38", "record": "CVE-2025-25290", "field": "creation_timestamp", "uuid": "3a8e3ef0-8773-461b-94fe-c97c533d8480", "url": "https://github.com/octokit/request.js/security/advisories/GHSA-rmvr-2pp2-xj38"}, {"timestamp": "2025-02-14T18:00:18Z", "date_only": false, "value": "2025-02-14T18:00:18Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RMVR-2PP2-XJ38", "record": "GHSA-RMVR-2PP2-XJ38", "field": "published"}, {"timestamp": "2025-02-14T19:37:47.110Z", "date_only": false, "value": "2025-02-14T19:37:47.110Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-25290", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-02-14T19:40:19.588Z", "date_only": false, "value": "2025-02-14T19:40:19.588915Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/114003936429038682", "record": "CVE-2025-25290", "field": "creation_timestamp", "uuid": "bd298f1c-f167-4589-b5da-9f8e69d25d94", "url": "https://infosec.exchange/users/cve/statuses/114003936429038682"}, {"timestamp": "2025-02-14T20:04:29.499Z", "date_only": false, "value": "2025-02-14T20:04:29.499678Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-25290", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-14T20:04:29.499Z", "date_only": false, "value": "2025-02-14T20:04:29.499678Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-25290", "record": "FKIE_CVE-2025-25290", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-14T20:04:42.662Z", "date_only": false, "value": "2025-02-14T20:04:42.662Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-25290", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-14T20:15:35Z", "date_only": false, "value": "2025-02-14T20:15:35Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RMVR-2PP2-XJ38", "record": "GHSA-RMVR-2PP2-XJ38", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-02-14T20:15:35.593Z", "date_only": false, "value": "2025-02-14T20:15:35.593", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-25290", "record": "FKIE_CVE-2025-25290", "field": "published"}, {"timestamp": "2025-02-14T20:15:57.954Z", "date_only": false, "value": "2025-02-14T20:15:57.954277Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5zfulgoq2a", "record": "CVE-2025-25290", "field": "creation_timestamp", "uuid": "12bf2f94-437b-42e9-bfa4-fe569111989b", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5zfulgoq2a"}, {"timestamp": "2025-02-14T22:50:11.842Z", "date_only": false, "value": "2025-02-14T22:50:11.842762Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li6bzmtubr22", "record": "CVE-2025-25290", "field": "creation_timestamp", "uuid": "38ff4b16-66e4-42f4-aadc-3b6e50ce07ac", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3li6bzmtubr22"}, {"timestamp": "2025-02-15T00:08:43Z", "date_only": false, "value": "2025-02-15T00:08:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/18144", "record": "CVE-2025-25290", "field": "creation_timestamp", "uuid": "2770dcd5-64e4-47fa-ad48-87d6b283dd7e", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25290 - GitHub Octokit Regular Expression Denial of Service (ReDoS)\", \n  \"Content\": \"CVE ID : CVE-2025-25290 \nPublished : Feb. 14, 2025, 8:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : @octokit/request sends parameterized requests to GitHub\u2019s APIs with sensible defaults in browsers and Node. Starting in version 1.0.0 and prior to version 9.2.1, the regular expression `/<([^]+)>; rel=\"deprecation\"/` used to match the `link` header in HTTP responses is vulnerable to a ReDoS (Regular Expression Denial of Service) attack. This vulnerability arises due to the unbounded nature of the regex's matching behavior, which can lead to catastrophic backtracking when processing specially crafted input. An attacker could exploit this flaw by sending a malicious `link` header, resulting in excessive CPU usage and potentially causing the server to become unresponsive, impacting service availability. Version 9.2.1 fixes the issue. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/18144"}, {"timestamp": "2025-03-28T00:00:00Z", "date_only": true, "value": "2025-03-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0279", "record": "CERTFR-2025-AVI-0279", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2025-04-01T00:00:00Z", "date_only": true, "value": "2025-04-01", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0279", "record": "CERTFR-2025-AVI-0279", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2025-04-03T00:00:00Z", "date_only": true, "value": "2025-04-03", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0279", "record": "CERTFR-2025-AVI-0279", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0279", "record": "CERTFR-2025-AVI-0279", "field": "last_revision_date"}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0279", "record": "CERTFR-2025-AVI-0279", "field": "initial_release_date"}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0279", "record": "CERTFR-2025-AVI-0279", "field": "revisions.0.revision_date"}, {"timestamp": "2026-01-16T17:29:06.418Z", "date_only": false, "value": "2026-01-16T17:29:06.418Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-25290", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-01-16T17:29:06.418Z", "date_only": false, "value": "2026-01-16T17:29:06.418Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2025-25290", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-01-16T17:29:36Z", "date_only": false, "value": "2026-01-16T17:29:36Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RMVR-2PP2-XJ38", "record": "GHSA-RMVR-2PP2-XJ38", "field": "modified"}, {"timestamp": "2026-06-17T09:00:37.507Z", "date_only": false, "value": "2026-06-17T09:00:37.507", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-25290", "record": "FKIE_CVE-2025-25290", "field": "lastModified"}]}