{"metadata": {"vulnerability": "CVE-2025-29776", "count": 18, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 10}}, "data": [{"timestamp": "2025-03-11T14:23:00.475Z", "date_only": false, "value": "2025-03-11T14:23:00.475Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-29776", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-14T13:13:27.137Z", "date_only": false, "value": "2025-03-14T13:13:27.137Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-29776", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-03-14T13:13:27.137Z", "date_only": false, "value": "2025-03-14T13:13:27.137Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2025-29776", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-14T14:10:07.186Z", "date_only": false, "value": "2025-03-14T14:10:07.186785Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/potato.software/post/3lkdrzgfcqb2i", "record": "CVE-2025-29776", "field": "creation_timestamp", "uuid": "0c5abd91-e959-44c0-a4d9-31b8a309caf7", "url": "https://bsky.app/profile/potato.software/post/3lkdrzgfcqb2i"}, {"timestamp": "2025-03-14T14:15:18Z", "date_only": false, "value": "2025-03-14T14:15:18Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-XC76-5PF9-MX8M", "record": "GHSA-XC76-5PF9-MX8M", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-03-14T14:15:18.847Z", "date_only": false, "value": "2025-03-14T14:15:18.847", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-29776", "record": "FKIE_CVE-2025-29776", "field": "published"}, {"timestamp": "2025-03-14T14:46:01.696Z", "date_only": false, "value": "2025-03-14T14:46:01.696959Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-29776", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-03-14T14:46:01.696Z", "date_only": false, "value": "2025-03-14T14:46:01.696959Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-29776", "record": "FKIE_CVE-2025-29776", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-03-14T14:46:38.269Z", "date_only": false, "value": "2025-03-14T14:46:38.269Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-29776", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-14T16:42:35Z", "date_only": false, "value": "2025-03-14T16:42:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/20301", "record": "CVE-2025-29776", "field": "creation_timestamp", "uuid": "226e9edf-387b-46b6-9aff-0b784f5a21fb", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-29776 - Azle WebAssembly Runtime Timer Infinite Loop Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-29776 \nPublished : March 14, 2025, 2:15 p.m. | 1\u00a0hour, 15\u00a0minutes ago \nDescription : Azle is a WebAssembly runtime for TypeScript and JavaScript on ICP. Calling `setTimer` in Azle versions `0.27.0`, `0.28.0`, and `0.29.0` causes an immediate infinite loop of timers to be executed on the canister, each timer attempting to clean up the global state of the previous timer. The infinite loop will occur with any valid invocation of `setTimer`. The problem has been fixed as of Azle version `0.30.0`. As a workaround, if a canister is caught in this infinite loop after calling `setTimer`, the canister can be upgraded and the timers will all be cleared, thus ending the loop. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/20301"}, {"timestamp": "2025-03-14T16:46:17.051Z", "date_only": false, "value": "2025-03-14T16:46:17.051775Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lke2qhgz2f2m", "record": "CVE-2025-29776", "field": "creation_timestamp", "uuid": "a18b986a-5168-4605-b51f-ed49424cddad", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lke2qhgz2f2m"}, {"timestamp": "2025-03-14T17:31:07Z", "date_only": false, "value": "2025-03-14T17:31:07Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XC76-5PF9-MX8M", "record": "GHSA-XC76-5PF9-MX8M", "field": "published"}, {"timestamp": "2025-03-15T20:47:15Z", "date_only": false, "value": "2025-03-15T20:47:15Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-XC76-5PF9-MX8M", "record": "GHSA-XC76-5PF9-MX8M", "field": "modified"}, {"timestamp": "2025-03-15T20:49:42.247Z", "date_only": false, "value": "2025-03-15T20:49:42.247Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CVE", "record": "CVE-2025-29776", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2025-03-15T20:49:42.369Z", "date_only": false, "value": "2025-03-15T20:49:42.369Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-29776", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-15T20:49:42.369Z", "date_only": false, "value": "2025-03-15T20:49:42.369Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2025-29776", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-15T21:45:46Z", "date_only": false, "value": "2025-03-15T21:45:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7692", "record": "CVE-2025-29776", "field": "creation_timestamp", "uuid": "3187691d-181f-46fd-b268-44d16c1afd13", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29776\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L)\n\ud83d\udd39 Description: Azle is a WebAssembly runtime for TypeScript and JavaScript on ICP. Calling `setTimer` in Azle versions `0.27.0`, `0.28.0`, and `0.29.0` causes an immediate infinite loop of timers to be executed on the canister, each timer attempting to clean up the global state of the previous timer. The infinite loop will occur with any valid invocation of `setTimer`. The problem has been fixed as of Azle version `0.30.0`. As a workaround, if a canister is caught in this infinite loop after calling `setTimer`, the canister can be upgraded and the timers will all be cleared, thus ending the loop.\n\ud83d\udccf Published: 2025-03-14T13:13:27.137Z\n\ud83d\udccf Modified: 2025-03-15T20:49:42.369Z\n\ud83d\udd17 References:\n1. https://github.com/demergent-labs/azle/security/advisories/GHSA-xc76-5pf9-mx8m\n2. https://github.com/demergent-labs/azle/releases/tag/0.30.0", "url": "https://t.me/DarkWebInformer_CVEAlerts/7692"}, {"timestamp": "2026-06-17T09:05:39.150Z", "date_only": false, "value": "2026-06-17T09:05:39.150", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-29776", "record": "FKIE_CVE-2025-29776", "field": "lastModified"}]}