{"metadata": {"vulnerability": "CVE-2025-27100", "count": 21, "kinds": {"milestone": 5, "sighting": 3, "kev": 0, "other": 13}}, "data": [{"timestamp": "2025-02-18T16:44:48.765Z", "date_only": false, "value": "2025-02-18T16:44:48.765Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-27100", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-02-21T00:03:01.411Z", "date_only": false, "value": "2025-02-21T00:03:01.411Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-27100", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-02-21T00:03:01.411Z", "date_only": false, "value": "2025-02-21T00:03:01.411Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2025-27100", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-21T00:15:09Z", "date_only": false, "value": "2025-02-21T00:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-J7JW-28JM-WHR6", "record": "GHSA-J7JW-28JM-WHR6", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2025-02-21T00:15:09.250Z", "date_only": false, "value": "2025-02-21T00:15:09.250", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-27100", "record": "FKIE_CVE-2025-27100", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-02-21T00:17:47Z", "date_only": false, "value": "2025-02-21T00:17:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4840", "record": "CVE-2025-27100", "field": "creation_timestamp", "uuid": "a4ee1b2d-3d2d-48ac-acbc-e089f157d640", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27100\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: lakeFS is an open-source tool that transforms your object storage into a Git-like repository. In affected versions an authenticated user can crash lakeFS by exhausting server memory.  This is an authenticated denial-of-service issue. This problem has been patched in version 1.50.0. Users on versions 1.49.1 and below are affected. Users are advised to upgrade. Users unable to upgrade should either set the environment variable `LAKEFS_BLOCKSTORE_S3_DISABLE_PRE_SIGNED_MULTIPART` to `true` or configure the `disable_pre_signed_multipart` key to true in their config yaml.\n\ud83d\udccf Published: 2025-02-21T00:03:01.411Z\n\ud83d\udccf Modified: 2025-02-21T00:03:01.411Z\n\ud83d\udd17 References:\n1. https://github.com/treeverse/lakeFS/security/advisories/GHSA-j7jw-28jm-whr6\n2. https://github.com/treeverse/lakeFS/commit/3a625752acdf3f8e137bec20451e71d0f9fa82f2", "url": "https://t.me/DarkWebInformer_CVEAlerts/4840"}, {"timestamp": "2025-02-21T02:11:50Z", "date_only": false, "value": "2025-02-21T02:11:50.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/gX2usgmFFKJ2pv-udzgAblLXZlxiQRuWHtTIOz9tTmPtMN88", "record": "CVE-2025-27100", "field": "creation_timestamp", "uuid": "453b3a19-7ff7-4fbd-8550-c8df49a58fdc"}, {"timestamp": "2025-02-21T03:04:08Z", "date_only": false, "value": "2025-02-21T03:04:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/18621", "record": "CVE-2025-27100", "field": "creation_timestamp", "uuid": "21a3496e-1a6c-44d4-824e-57bbbdcaf59f", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27100 - LakeFS Server Memory Exhaustion Denial-of-Service\", \n  \"Content\": \"CVE ID : CVE-2025-27100 \nPublished : Feb. 21, 2025, 12:15 a.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : lakeFS is an open-source tool that transforms your object storage into a Git-like repository. In affected versions an authenticated user can crash lakeFS by exhausting server memory.  This is an authenticated denial-of-service issue. This problem has been patched in version 1.50.0. Users on versions 1.49.1 and below are affected. Users are advised to upgrade. Users unable to upgrade should either set the environment variable `LAKEFS_BLOCKSTORE_S3_DISABLE_PRE_SIGNED_MULTIPART` to `true` or configure the `disable_pre_signed_multipart` key to true in their config yaml. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/18621"}, {"timestamp": "2025-02-21T17:19:14.479Z", "date_only": false, "value": "2025-02-21T17:19:14.479656Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-27100", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-21T17:19:14.479Z", "date_only": false, "value": "2025-02-21T17:19:14.479656Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-27100", "record": "FKIE_CVE-2025-27100", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-02-21T17:22:59.322Z", "date_only": false, "value": "2025-02-21T17:22:59.322Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-27100", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-21T17:22:59.322Z", "date_only": false, "value": "2025-02-21T17:22:59.322Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-27100", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-21T21:43:16Z", "date_only": false, "value": "2025-02-21T21:43:16Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-J7JW-28JM-WHR6", "record": "GHSA-J7JW-28JM-WHR6", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-02-21T21:43:16Z", "date_only": false, "value": "2025-02-21T21:43:16Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-J7JW-28JM-WHR6", "record": "GHSA-J7JW-28JM-WHR6", "field": "modified", "linked_record": true}, {"timestamp": "2025-03-13T00:00:00Z", "date_only": false, "value": "2025-03-13T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14889-1", "record": "OPENSUSE-SU-2025:14889-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-03-13T00:00:00Z", "date_only": false, "value": "2025-03-13T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14889-1", "record": "OPENSUSE-SU-2025:14889-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-03-13T00:00:00Z", "date_only": false, "value": "2025-03-13T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14889-1", "record": "OPENSUSE-SU-2025:14889-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2025-03-13T00:00:00Z", "date_only": false, "value": "2025-03-13T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14889-1", "record": "OPENSUSE-SU-2025:14889-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-17T09:03:01.940Z", "date_only": false, "value": "2026-06-17T09:03:01.940", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-27100", "record": "FKIE_CVE-2025-27100", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-09-20T21:29:12Z", "date_only": false, "value": "2026-09-20T21:29:12Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14889-1", "record": "OPENSUSE-SU-2025:14889-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T21:29:12Z", "date_only": false, "value": "2026-09-20T21:29:12Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14889-1", "record": "OPENSUSE-SU-2025:14889-1", "field": "document.tracking.current_release_date", "linked_record": true}], "metrics": {"as_of": "2026-11-13T03:08:02.913Z", "anchors": {"origin": {"timestamp": "2025-02-21T00:03:01.411Z", "date_only": false, "value": "2025-02-21T00:03:01.411Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-27100", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-02-21T00:03:01.411Z", "date_only": false, "value": "2025-02-21T00:03:01.411Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-27100", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 54443101.502538, "hours": 15123.083750705, "days": 630.1284896127083, "min_seconds": 54443101.502538, "max_seconds": 54443101.502538, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-02-21T00:03:01.411Z", "date_only": false, "value": "2025-02-21T00:03:01.411Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-27100", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-13T03:08:02.913Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}