{"metadata": {"vulnerability": "GHSA-VWFH-M3Q7-9JPW", "count": 8, "kinds": {"milestone": 2, "sighting": 2, "kev": 0, "other": 4}}, "data": [{"timestamp": "2025-02-26T18:11:52.306Z", "date_only": false, "value": "2025-02-26T18:11:52.306Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2025-27510", "record": "CVE-2025-27510", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-04T21:48:12.688Z", "date_only": false, "value": "2025-03-04T21:48:12.688Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2025-27510", "record": "CVE-2025-27510", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-03-04T21:48:12.688Z", "date_only": false, "value": "2025-03-04T21:48:12.688Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-27510 / GitHub_M", "record": "CVE-2025-27510", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-04T22:33:26Z", "date_only": false, "value": "2025-03-04T22:33:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6454", "record": "GHSA-VWFH-M3Q7-9JPW", "field": "creation_timestamp", "uuid": "9c85f8c3-18c2-4d71-9c51-6b8ccdc0c43a", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27510\n\ud83d\udd25 CVSS Score: 9.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: conda-forge-metadata provides programatic access to conda-forge's metadata. conda-forge-metadata uses an optional dependency - \"conda-oci-mirror\" which was neither present on the PyPi repository nor registered by any entity. If conda-oci-mirror is taken over by a threat actor, it can result in remote code execution.\n\ud83d\udccf Published: 2025-03-04T21:48:12.688Z\n\ud83d\udccf Modified: 2025-03-04T21:48:12.688Z\n\ud83d\udd17 References:\n1. https://github.com/conda-forge/conda-forge-metadata/security/advisories/GHSA-vwfh-m3q7-9jpw\n2. https://github.com/conda-forge/conda-forge-metadata/blob/799aee36b21ee06289d73d57838b28201f5a57af/pyproject.toml#L28", "url": "https://t.me/DarkWebInformer_CVEAlerts/6454"}, {"timestamp": "2025-03-04T23:30:46Z", "date_only": false, "value": "2025-03-04T23:30:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/kKmhqMAO0G41xSuzHMEpIuMySOUPwocgu6rbuAMEaHx4Gt4", "record": "GHSA-VWFH-M3Q7-9JPW", "field": "creation_timestamp", "uuid": "35a30619-5717-4176-bd34-6266a13a3658"}, {"timestamp": "2025-03-05T16:37:27.676Z", "date_only": false, "value": "2025-03-05T16:37:27.676304Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2025-27510 / CISA-ADP", "record": "CVE-2025-27510", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-03-05T16:37:33.675Z", "date_only": false, "value": "2025-03-05T16:37:33.675Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-27510", "record": "CVE-2025-27510", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-05T16:37:33.675Z", "date_only": false, "value": "2025-03-05T16:37:33.675Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-27510 / CISA-ADP", "record": "CVE-2025-27510", "field": "containers.adp.0.providerMetadata.dateUpdated"}]}