{"metadata": {"vulnerability": "GHSA-9qr9-h5gf-34mp", "count": 34, "kinds": {"milestone": 3, "sighting": 26, "kev": 0, "other": 5}}, "data": [{"timestamp": "2025-12-03T16:43:56.333Z", "date_only": false, "value": "2025-12-03T16:43:56.333405Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hnws.bsky.social/post/3m73vpks5fm2i", "record": "GHSA-9qr9-h5gf-34mp", "field": "creation_timestamp", "uuid": "0766e653-0281-4408-b749-2117bb4d76c7", "url": "https://bsky.app/profile/hnws.bsky.social/post/3m73vpks5fm2i"}, {"timestamp": "2025-12-03T17:00:30.015Z", "date_only": false, "value": "2025-12-03T17:00:30.015260Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hnbot.gsuscs.xyz/post/3m73wn646xc2m", "record": "GHSA-9qr9-h5gf-34mp", "field": "creation_timestamp", "uuid": "8ba64435-0a31-4808-93ff-19f5685e90da", "url": "https://bsky.app/profile/hnbot.gsuscs.xyz/post/3m73wn646xc2m"}, {"timestamp": "2025-12-03T17:07:45.298Z", "date_only": false, "value": "2025-12-03T17:07:45.298127Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/betterhn20.e-work.xyz/post/3m73x254zxc2e", "record": "GHSA-9qr9-h5gf-34mp", "field": "creation_timestamp", "uuid": "c740f704-89d3-4e44-a655-512ebd7fe473", "url": "https://bsky.app/profile/betterhn20.e-work.xyz/post/3m73x254zxc2e"}, {"timestamp": "2025-12-03T17:20:28.269Z", "date_only": false, "value": "2025-12-03T17:20:28.269036Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackernewstop5.bsky.social/post/3m73xquipth2f", "record": "GHSA-9qr9-h5gf-34mp", "field": "creation_timestamp", "uuid": "71f933f4-27ac-40c4-860f-6fd8226dd1f2", "url": "https://bsky.app/profile/hackernewstop5.bsky.social/post/3m73xquipth2f"}, {"timestamp": "2025-12-03T17:59:01.427Z", "date_only": false, "value": "2025-12-03T17:59:01.427978Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/betterhn50.e-work.xyz/post/3m73zvshke42g", "record": "GHSA-9qr9-h5gf-34mp", "field": "creation_timestamp", "uuid": "f84b8078-6cdb-4a02-bd34-b8d548d4e510", "url": "https://bsky.app/profile/betterhn50.e-work.xyz/post/3m73zvshke42g"}, {"timestamp": "2025-12-03T18:15:47Z", "date_only": false, "value": "2025-12-03T18:15:47Z", "kind": "other", "label": "Nvd published at", "source": "github", "record": "GHSA-9qr9-h5gf-34mp", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-12-03T18:30:15.237Z", "date_only": false, "value": "2025-12-03T18:30:15.237650Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hn100.atproto.rocks/post/3m743nng6e322", "record": "GHSA-9qr9-h5gf-34mp", "field": "creation_timestamp", "uuid": "245eceb6-1276-4d54-9566-fa5b6fbc24fe", "url": "https://bsky.app/profile/hn100.atproto.rocks/post/3m743nng6e322"}, {"timestamp": "2025-12-03T18:34:34Z", "date_only": false, "value": "2025-12-03T18:34:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/MarkKropf/d83a36184fc0c4b3eed362cdc6fe119e", "record": "GHSA-9qr9-h5gf-34mp", "field": "creation_timestamp", "uuid": "69d9f02c-c3b7-456d-ab84-31eacbc43d73", "url": "https://gist.github.com/MarkKropf/d83a36184fc0c4b3eed362cdc6fe119e"}, {"timestamp": "2025-12-03T19:03:05.481Z", "date_only": false, "value": "2025-12-03T19:03:05.481554Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hnfeed.bsky.social/post/3m745if5mac2y", "record": "GHSA-9qr9-h5gf-34mp", "field": "creation_timestamp", "uuid": "92b78d36-84ce-43c2-9096-b9f825453cf0", "url": "https://bsky.app/profile/hnfeed.bsky.social/post/3m745if5mac2y"}, {"timestamp": "2025-12-03T19:07:11Z", "date_only": false, "value": "2025-12-03T19:07:11Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-9qr9-h5gf-34mp", "field": "published"}, {"timestamp": "2025-12-03T20:20:02.278Z", "date_only": false, "value": "2025-12-03T20:20:02.278806Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/neuralmarkets.substack.com/post/3m74brxrhri2r", "record": "GHSA-9qr9-h5gf-34mp", "field": "creation_timestamp", "uuid": "21b30c8e-a457-4e78-8dc7-6d8c95496951", "url": "https://bsky.app/profile/neuralmarkets.substack.com/post/3m74brxrhri2r"}, {"timestamp": "2025-12-03T20:23:23.364Z", "date_only": false, "value": "2025-12-03T20:23:23.364025Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newsyc200.bsky.social/post/3m74bxxvig72s", "record": "GHSA-9qr9-h5gf-34mp", "field": "creation_timestamp", "uuid": "fe07b1dd-611d-40dd-996d-852d5ea8b954", "url": "https://bsky.app/profile/newsyc200.bsky.social/post/3m74bxxvig72s"}, {"timestamp": "2025-12-03T21:23:24.549Z", "date_only": false, "value": "2025-12-03T21:23:24.549070Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newsyc250.bsky.social/post/3m74fdbywdt24", "record": "GHSA-9qr9-h5gf-34mp", "field": "creation_timestamp", "uuid": "16431079-eb22-414c-8a98-35c7f3eb0e42", "url": "https://bsky.app/profile/newsyc250.bsky.social/post/3m74fdbywdt24"}, {"timestamp": "2025-12-03T21:25:35Z", "date_only": false, "value": "2025-12-03T21:25:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/notlukatsky/7887", "record": "GHSA-9QR9-H5GF-34MP", "field": "creation_timestamp", "uuid": "6b118b0b-8470-457b-b81b-5311b12ac6a0", "content": "RCE \u0432 React, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0443\u0435\u0442 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0441\u0430\u0439\u0442\u043e\u0432. \u0412\u0435\u0440\u0438\u043c?\n\nhttps://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components\nhttps://github.com/advisories/GHSA-9qr9-h5gf-34mp\n\n\u041f\u043e\u0448\u0451\u043b \u0441\u0435\u0440\u0447\u0438\u0442\u044c PoC, \u0430 \u0432\u0430\u043c \u0441\u043f\u043e\u043a\u043e\u0439\u043d\u043e\u0439 \u043d\u043e\u0447\u0438))", "url": "https://t.me/notlukatsky/7887"}, {"timestamp": "2025-12-03T21:53:37.633Z", "date_only": false, "value": "2025-12-03T21:53:37.633551Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/poc-popoyama.misskey.systems.ap.brid.gy/post/3m74gz24rli62", "record": "GHSA-9qr9-h5gf-34mp", "field": "creation_timestamp", "uuid": "a4d7d715-a314-4666-a7df-6f1fad2f17c9", "url": "https://bsky.app/profile/poc-popoyama.misskey.systems.ap.brid.gy/post/3m74gz24rli62"}, {"timestamp": "2025-12-03T22:22:19.950Z", "date_only": false, "value": "2025-12-03T22:22:19.950839Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/betterhn300.e-work.xyz/post/3m74imn2wih2g", "record": "GHSA-9qr9-h5gf-34mp", "field": "creation_timestamp", "uuid": "db75506f-72f2-4fb0-9b7c-809c4fb2ea7f", "url": "https://bsky.app/profile/betterhn300.e-work.xyz/post/3m74imn2wih2g"}, {"timestamp": "2025-12-03T23:25:32Z", "date_only": false, "value": "2025-12-03T23:25:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/sjagoori/7972551ad9c319d37780b80be8366f65", "record": "GHSA-9qr9-h5gf-34mp", "field": "creation_timestamp", "uuid": "c84bba14-74ab-4845-917e-c707da7ad3f7", "url": "https://gist.github.com/sjagoori/7972551ad9c319d37780b80be8366f65"}, {"timestamp": "2025-12-04T00:10:25Z", "date_only": false, "value": "2025-12-04T00:10:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/sjagoori/25af87c2b1e06dc417abe886562299fc", "record": "GHSA-9qr9-h5gf-34mp", "field": "creation_timestamp", "uuid": "a3b1a1c6-abe6-496e-9205-322445f92f24", "url": "https://gist.github.com/sjagoori/25af87c2b1e06dc417abe886562299fc"}, {"timestamp": "2025-12-04T00:57:55Z", "date_only": false, "value": "2025-12-04T00:57:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/tluyben/f8051d0557025add079e377f1395182f", "record": "GHSA-9qr9-h5gf-34mp", "field": "creation_timestamp", "uuid": "c41e0d4a-3ce3-42f6-bd41-4bbb2879c125", "url": "https://gist.github.com/tluyben/f8051d0557025add079e377f1395182f"}, {"timestamp": "2025-12-04T08:00:14.781Z", "date_only": false, "value": "2025-12-04T08:00:14.781457Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hnbest.bsky.social/post/3m75iw2cx572n", "record": "GHSA-9qr9-h5gf-34mp", "field": "creation_timestamp", "uuid": "020389f4-85db-432a-9ad4-15b0e8e30a3f", "url": "https://bsky.app/profile/hnbest.bsky.social/post/3m75iw2cx572n"}, {"timestamp": "2025-12-04T08:33:20.570Z", "date_only": false, "value": "2025-12-04T08:33:20.570113Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newsyc500.bsky.social/post/3m75kr7sh2o2z", "record": "GHSA-9qr9-h5gf-34mp", "field": "creation_timestamp", "uuid": "5d1159e5-b390-4641-8125-9a5e6616f274", "url": "https://bsky.app/profile/newsyc500.bsky.social/post/3m75kr7sh2o2z"}, {"timestamp": "2025-12-04T08:55:27.128Z", "date_only": false, "value": "2025-12-04T08:55:27.128258Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/topickapp.bsky.social/post/3m75lyqhod52k", "record": "GHSA-9qr9-h5gf-34mp", "field": "creation_timestamp", "uuid": "69385a13-4d6f-4f3d-81e4-8cf2cfc192ba", "url": "https://bsky.app/profile/topickapp.bsky.social/post/3m75lyqhod52k"}, {"timestamp": "2025-12-04T09:06:39.137Z", "date_only": false, "value": "2025-12-04T09:06:39.137331Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kdmsnr.com/post/3m75mms4ahc2c", "record": "GHSA-9qr9-h5gf-34mp", "field": "creation_timestamp", "uuid": "a9048f97-3092-4b65-a2c2-b5e04128bf48", "url": "https://bsky.app/profile/kdmsnr.com/post/3m75mms4ahc2c"}, {"timestamp": "2025-12-04T16:58:25Z", "date_only": false, "value": "2025-12-04T16:58:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://seclists.org/oss-sec/2025/q4/246", "record": "GHSA-9qr9-h5gf-34mp", "field": "creation_timestamp", "uuid": "732aa260-14bf-4e6c-9d02-a1a88d80bc61", "url": "https://seclists.org/oss-sec/2025/q4/246"}, {"timestamp": "2025-12-05T13:54:28.321Z", "date_only": false, "value": "2025-12-05T13:54:28.321487Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/6739b288-995a-4f1a-9f03-5d1ced3a8fbd", "record": "GHSA-9qr9-h5gf-34mp", "field": "creation_timestamp", "uuid": "54afb5c3-a3f8-4eee-a343-5f75e9853224", "url": "https://vulnerability.circl.lu/bundle/6739b288-995a-4f1a-9f03-5d1ced3a8fbd"}, {"timestamp": "2025-12-06T10:03:49.605Z", "date_only": false, "value": "2025-12-06T10:03:49.605130Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/shadowserver/statuses/115672050969855947", "record": "GHSA-9qr9-h5gf-34mp", "field": "creation_timestamp", "uuid": "8f398b1e-4a59-47b9-8d3d-cf7a5d3ca830", "url": "https://infosec.exchange/users/shadowserver/statuses/115672050969855947"}, {"timestamp": "2025-12-07T15:01:49Z", "date_only": false, "value": "2025-12-07T15:01:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/pxlvoid/2dee87e481533f31473871df69b485dc", "record": "GHSA-9qr9-h5gf-34mp", "field": "creation_timestamp", "uuid": "dc65c873-4ce0-455a-ac88-2c8b9d035911", "url": "https://gist.github.com/pxlvoid/2dee87e481533f31473871df69b485dc"}, {"timestamp": "2025-12-11T19:31:04Z", "date_only": false, "value": "2025-12-11T19:31:04Z", "kind": "other", "label": "Updated", "source": "github", "record": "GHSA-9qr9-h5gf-34mp", "field": "modified"}, {"timestamp": "2025-12-23T15:28:41.580Z", "date_only": false, "value": "2025-12-23T15:28:41.580588Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thecascading.bsky.social/post/3mao2tfsgxj2j", "record": "GHSA-9qr9-h5gf-34mp", "field": "creation_timestamp", "uuid": "5dd3f67a-856b-4a80-97b4-6edc039e5ac8", "url": "https://bsky.app/profile/thecascading.bsky.social/post/3mao2tfsgxj2j"}, {"timestamp": "2026-04-01T09:39:16.823Z", "date_only": false, "value": "2026-04-01T09:39:16.823043Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-IL36032", "record": "CLEANSTART-2026-IL36032", "field": "published"}, {"timestamp": "2026-09-18T10:26:41.906Z", "date_only": false, "value": "2026-09-18T10:26:41.906578Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-JR74440", "record": "CLEANSTART-2026-JR74440", "field": "published"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-IL36032", "record": "CLEANSTART-2026-IL36032", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-IL36032", "record": "CLEANSTART-2026-IL36032", "field": "withdrawn"}, {"timestamp": "2026-10-15T12:00:00Z", "date_only": false, "value": "2026-10-15T12:00:00Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-JR74440", "record": "CLEANSTART-2026-JR74440", "field": "modified"}]}