{"metadata": {"vulnerability": "GHSA-5MVM-89C9-9GM5", "count": 10, "kinds": {"milestone": 3, "sighting": 1, "kev": 0, "other": 6}}, "data": [{"timestamp": "2025-02-19T16:30:47.778Z", "date_only": false, "value": "2025-02-19T16:30:47.778Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2025-27146", "record": "CVE-2025-27146", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-02-25T18:29:34Z", "date_only": false, "value": "2025-02-25T18:29:34Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-5MVM-89C9-9GM5", "field": "published"}, {"timestamp": "2025-02-25T20:04:40.400Z", "date_only": false, "value": "2025-02-25T20:04:40.400Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2025-27146", "record": "CVE-2025-27146", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-02-25T20:04:40.400Z", "date_only": false, "value": "2025-02-25T20:04:40.400Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-27146 / GitHub_M", "record": "CVE-2025-27146", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-25T20:15:38Z", "date_only": false, "value": "2025-02-25T20:15:38Z", "kind": "other", "label": "Nvd published at", "source": "github", "record": "GHSA-5MVM-89C9-9GM5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-02-25T20:22:59Z", "date_only": false, "value": "2025-02-25T20:22:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5373", "record": "GHSA-5MVM-89C9-9GM5", "field": "creation_timestamp", "uuid": "aa4c8ca5-53e8-4b29-8745-beff69a5a8fe", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27146\n\ud83d\udd25 CVSS Score: 2.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: matrix-appservice-irc is a Node.js IRC bridge for Matrix. The matrix-appservice-irc bridge up to version 3.0.3 contains a vulnerability which can lead to arbitrary IRC command execution as the puppeted user. The attacker can only inject commands executed as their own IRC user. The vulnerability has been patched in matrix-appservice-irc version 3.0.4.\n\ud83d\udccf Published: 2025-02-25T20:04:40.400Z\n\ud83d\udccf Modified: 2025-02-25T20:04:40.400Z\n\ud83d\udd17 References:\n1. https://github.com/matrix-org/matrix-appservice-irc/security/advisories/GHSA-5mvm-89c9-9gm5\n2. https://github.com/matrix-org/matrix-appservice-irc/commit/74f02c8e11f16ed1b355700092c1aa9c036a11bd", "url": "https://t.me/DarkWebInformer_CVEAlerts/5373"}, {"timestamp": "2025-02-25T20:30:53.918Z", "date_only": false, "value": "2025-02-25T20:30:53.918731Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2025-27146 / CISA-ADP", "record": "CVE-2025-27146", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-25T20:33:36.095Z", "date_only": false, "value": "2025-02-25T20:33:36.095Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-27146", "record": "CVE-2025-27146", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-25T20:33:36.095Z", "date_only": false, "value": "2025-02-25T20:33:36.095Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-27146 / CISA-ADP", "record": "CVE-2025-27146", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-25T21:46:09Z", "date_only": false, "value": "2025-02-25T21:46:09Z", "kind": "other", "label": "Updated", "source": "github", "record": "GHSA-5MVM-89C9-9GM5", "field": "modified"}]}