{"metadata": {"vulnerability": "GHSA-356w-63v5-8wf4", "count": 13, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 7}}, "data": [{"timestamp": "2025-04-06T19:46:02.464Z", "date_only": false, "value": "2025-04-06T19:46:02.464Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2025-32395", "record": "CVE-2025-32395", "field": "cveMetadata.dateReserved", "linked_record": true}, {"timestamp": "2025-04-10T13:25:19.177Z", "date_only": false, "value": "2025-04-10T13:25:19.177Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2025-32395", "record": "CVE-2025-32395", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2025-04-10T13:25:19.177Z", "date_only": false, "value": "2025-04-10T13:25:19.177Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-32395 / GitHub_M", "record": "CVE-2025-32395", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-04-10T14:14:30.473Z", "date_only": false, "value": "2025-04-10T14:14:30.473382Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2025-32395 / CISA-ADP", "record": "CVE-2025-32395", "field": "containers.adp.0.metrics.0.other.content.timestamp", "linked_record": true}, {"timestamp": "2025-04-10T14:14:40.591Z", "date_only": false, "value": "2025-04-10T14:14:40.591Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-32395", "record": "CVE-2025-32395", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-04-10T14:14:40.591Z", "date_only": false, "value": "2025-04-10T14:14:40.591Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-32395 / CISA-ADP", "record": "CVE-2025-32395", "field": "containers.adp.0.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-04-10T14:15:29Z", "date_only": false, "value": "2025-04-10T14:15:29Z", "kind": "other", "label": "Nvd published at", "source": "github", "record": "GHSA-356w-63v5-8wf4", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-04-11T14:06:03Z", "date_only": false, "value": "2025-04-11T14:06:03Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-356w-63v5-8wf4", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-04-11T14:06:03Z", "date_only": false, "value": "2025-04-11T14:06:03Z", "kind": "other", "label": "Updated", "source": "github", "record": "GHSA-356w-63v5-8wf4", "field": "modified"}, {"timestamp": "2025-06-09T19:21:23.799Z", "date_only": false, "value": "2025-06-09T19:21:23.799632Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/114655027697783093", "record": "GHSA-356w-63v5-8wf4", "field": "creation_timestamp", "uuid": "522c5274-2f70-47f2-a862-e35a7a7432b8", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/114655027697783093"}, {"timestamp": "2025-06-14T17:54:21Z", "date_only": false, "value": "2025-06-14T17:54:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TheDarkWebInformer/17956", "record": "GHSA-356W-63V5-8WF4", "field": "creation_timestamp", "uuid": "a6aba777-edc5-45cf-a6a6-bf4f227672b2", "content": "\ud83d\udea8CVE-2025-32395: Vite HTTP Request Target Denial of Service\n  \nFOFA Link: https://en.fofa.info/result?qbase64=Ym9keT0iL0B2aXRlL2NsaWVudCI%3D\n\nFOFA Query: body=\"/@vite/client\"\n\nResults: 130,393\n\nAdvisory/PoC: https://github.com/advisories/GHSA-356w-63v5-8wf4\n\nCVSS: 6.0", "url": "https://t.me/TheDarkWebInformer/17956", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-13T17:48:54Z", "date_only": false, "value": "2026-08-13T17:48:54Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-VITE-CVE-2025-32395", "record": "BREW-VITE-CVE-2025-32395", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-11T11:35:12Z", "date_only": false, "value": "2026-11-11T11:35:12Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-VITE-CVE-2025-32395", "record": "BREW-VITE-CVE-2025-32395", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-12T06:30:03.984Z", "anchors": {"origin": {"timestamp": "2025-04-11T14:06:03Z", "date_only": false, "value": "2025-04-11T14:06:03Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-356w-63v5-8wf4", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-04-11T14:06:03Z", "date_only": false, "value": "2025-04-11T14:06:03Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-356w-63v5-8wf4", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-06-14T17:54:21Z", "date_only": false, "value": "2025-06-14T17:54:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TheDarkWebInformer/17956", "record": "GHSA-356W-63V5-8WF4", "field": "creation_timestamp", "uuid": "a6aba777-edc5-45cf-a6a6-bf4f227672b2", "content": "\ud83d\udea8CVE-2025-32395: Vite HTTP Request Target Denial of Service\n  \nFOFA Link: https://en.fofa.info/result?qbase64=Ym9keT0iL0B2aXRlL2NsaWVudCI%3D\n\nFOFA Query: body=\"/@vite/client\"\n\nResults: 130,393\n\nAdvisory/PoC: https://github.com/advisories/GHSA-356w-63v5-8wf4\n\nCVSS: 6.0", "url": "https://t.me/TheDarkWebInformer/17956", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 5543298.0, "hours": 1539.805, "days": 64.15854166666666, "min_seconds": 5543298.0, "max_seconds": 5543298.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-04-11T14:06:03Z", "date_only": false, "value": "2025-04-11T14:06:03Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-356w-63v5-8wf4", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-06-14T17:54:21Z", "date_only": false, "value": "2025-06-14T17:54:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TheDarkWebInformer/17956", "record": "GHSA-356W-63V5-8WF4", "field": "creation_timestamp", "uuid": "a6aba777-edc5-45cf-a6a6-bf4f227672b2", "content": "\ud83d\udea8CVE-2025-32395: Vite HTTP Request Target Denial of Service\n  \nFOFA Link: https://en.fofa.info/result?qbase64=Ym9keT0iL0B2aXRlL2NsaWVudCI%3D\n\nFOFA Query: body=\"/@vite/client\"\n\nResults: 130,393\n\nAdvisory/PoC: https://github.com/advisories/GHSA-356w-63v5-8wf4\n\nCVSS: 6.0", "url": "https://t.me/TheDarkWebInformer/17956", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 50084640.984655, "hours": 13912.400273515277, "days": 579.6833447298033, "min_seconds": 50084640.984655, "max_seconds": 50084640.984655, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-04-11T14:06:03Z", "date_only": false, "value": "2025-04-11T14:06:03Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-356w-63v5-8wf4", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-12T06:30:03.984Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 44541342.984655, "hours": 12372.595273515279, "days": 515.5248030631366, "min_seconds": 44541342.984655, "max_seconds": 44541342.984655, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-06-14T17:54:21Z", "date_only": false, "value": "2025-06-14T17:54:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TheDarkWebInformer/17956", "record": "GHSA-356W-63V5-8WF4", "field": "creation_timestamp", "uuid": "a6aba777-edc5-45cf-a6a6-bf4f227672b2", "content": "\ud83d\udea8CVE-2025-32395: Vite HTTP Request Target Denial of Service\n  \nFOFA Link: https://en.fofa.info/result?qbase64=Ym9keT0iL0B2aXRlL2NsaWVudCI%3D\n\nFOFA Query: body=\"/@vite/client\"\n\nResults: 130,393\n\nAdvisory/PoC: https://github.com/advisories/GHSA-356w-63v5-8wf4\n\nCVSS: 6.0", "url": "https://t.me/TheDarkWebInformer/17956", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-12T06:30:03.984Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}