{"metadata": {"vulnerability": "GHSA-QV35-3GW6-8Q4J", "count": 10, "kinds": {"milestone": 3, "sighting": 1, "kev": 0, "other": 6}}, "data": [{"timestamp": "2024-08-05T14:46:22Z", "date_only": false, "value": "2024-08-05T14:46:22Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-QV35-3GW6-8Q4J", "field": "published"}, {"timestamp": "2025-01-27T15:32:29.449Z", "date_only": false, "value": "2025-01-27T15:32:29.449Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2025-24882", "record": "CVE-2025-24882", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-29T17:11:09Z", "date_only": false, "value": "2025-01-29T17:11:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3374", "record": "GHSA-QV35-3GW6-8Q4J", "field": "creation_timestamp", "uuid": "ea73c08f-236c-491c-b094-9d6893dd77c1", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-qv35-3gw6-8q4j\n\ud83d\udd25 CVSS Score: 5.1 (CVSS_V3)\n\ud83d\udd39 Description: ### Impact\nA malicious registry could return a different digest for a pinned manifest without detection.\n\n### Patches\nThis has been fixed in the v0.7.1 release.\n\n### Workarounds\nAfter running a `regclient.ManifestGet`, the returned digest can be compared to the requested digest.\n\n\ud83d\udccf Published: 2024-08-05T14:46:22Z\n\ud83d\udccf Modified: 2025-01-29T16:57:28Z\n\ud83d\udd17 References:\n1. https://github.com/regclient/regclient/security/advisories/GHSA-qv35-3gw6-8q4j\n2. https://github.com/regclient/regclient/commit/7d17cff26c22196b5ddd66bda8c5ee4abf3d1269\n3. https://github.com/regclient/regclient\n4. https://pkg.go.dev/vuln/GO-2024-3038", "url": "https://t.me/DarkWebInformer_CVEAlerts/3374"}, {"timestamp": "2025-01-29T17:40:07.496Z", "date_only": false, "value": "2025-01-29T17:40:07.496Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2025-24882", "record": "CVE-2025-24882", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-01-29T17:40:07.496Z", "date_only": false, "value": "2025-01-29T17:40:07.496Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-24882 / GitHub_M", "record": "CVE-2025-24882", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-29T17:52:40.596Z", "date_only": false, "value": "2025-01-29T17:52:40.596309Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2025-24882 / CISA-ADP", "record": "CVE-2025-24882", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-29T17:52:45.827Z", "date_only": false, "value": "2025-01-29T17:52:45.827Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-24882", "record": "CVE-2025-24882", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-29T17:52:45.827Z", "date_only": false, "value": "2025-01-29T17:52:45.827Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-24882 / CISA-ADP", "record": "CVE-2025-24882", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-29T18:15:47Z", "date_only": false, "value": "2025-01-29T18:15:47Z", "kind": "other", "label": "Nvd published at", "source": "github", "record": "GHSA-QV35-3GW6-8Q4J", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-01-29T19:04:36Z", "date_only": false, "value": "2025-01-29T19:04:36Z", "kind": "other", "label": "Updated", "source": "github", "record": "GHSA-QV35-3GW6-8Q4J", "field": "modified"}]}