{"metadata": {"vulnerability": "GHSA-jqq5-wc57-f8hj", "count": 13, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 7}}, "data": [{"timestamp": "2025-04-28T20:56:09.084Z", "date_only": false, "value": "2025-04-28T20:56:09.084Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2025-46724", "record": "CVE-2025-46724", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-05-20T17:22:13.475Z", "date_only": false, "value": "2025-05-20T17:22:13.475Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2025-46724", "record": "CVE-2025-46724", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-05-20T17:23:50.936Z", "date_only": false, "value": "2025-05-20T17:23:50.936Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-46724 / GitHub_M", "record": "CVE-2025-46724", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-20T17:43:48Z", "date_only": false, "value": "2025-05-20T17:43:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17025", "record": "GHSA-JQQ5-WC57-F8HJ", "field": "creation_timestamp", "uuid": "3b122083-e812-4301-9579-69b86d9cec54", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46724\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Langroid is a Python framework to build large language model (LLM)-powered applications. Prior to version 0.53.15, `TableChatAgent` uses `pandas eval()`. If fed by untrusted user input, like the case of a public-facing LLM application, it may be vulnerable to code injection. Langroid 0.53.15 sanitizes input to `TableChatAgent` by default to tackle the most common attack vectors, and added several warnings about the risky behavior in the project documentation.\n\ud83d\udccf Published: 2025-05-20T17:22:13.475Z\n\ud83d\udccf Modified: 2025-05-20T17:23:50.936Z\n\ud83d\udd17 References:\n1. https://github.com/langroid/langroid/security/advisories/GHSA-jqq5-wc57-f8hj\n2. https://github.com/langroid/langroid/commit/0d9e4a7bb3ae2eef8d38f2e970ff916599a2b2a6", "url": "https://t.me/DarkWebInformer_CVEAlerts/17025"}, {"timestamp": "2025-05-20T17:50:23.229Z", "date_only": false, "value": "2025-05-20T17:50:23.229656Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114541423678244181", "record": "GHSA-jqq5-wc57-f8hj", "field": "creation_timestamp", "uuid": "bf05d719-ef57-42e9-8009-7b7490f4a115", "url": "https://infosec.exchange/users/cR0w/statuses/114541423678244181"}, {"timestamp": "2025-05-20T17:53:31.640Z", "date_only": false, "value": "2025-05-20T17:53:31.640397Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2025-46724 / CISA-ADP", "record": "CVE-2025-46724", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-05-20T17:53:34.242Z", "date_only": false, "value": "2025-05-20T17:53:34.242Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-46724", "record": "CVE-2025-46724", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-05-20T17:53:34.242Z", "date_only": false, "value": "2025-05-20T17:53:34.242Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-46724 / CISA-ADP", "record": "CVE-2025-46724", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-20T18:00:27Z", "date_only": false, "value": "2025-05-20T18:00:27Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-jqq5-wc57-f8hj", "field": "published"}, {"timestamp": "2025-05-20T18:15:46Z", "date_only": false, "value": "2025-05-20T18:15:46Z", "kind": "other", "label": "Nvd published at", "source": "github", "record": "GHSA-jqq5-wc57-f8hj", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-06-29T11:50:36.152Z", "date_only": false, "value": "2026-06-29T11:50:36.152762Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-381", "record": "PYSEC-2026-381", "field": "published"}, {"timestamp": "2026-07-01T20:22:55.994Z", "date_only": false, "value": "2026-07-01T20:22:55.994322Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-381", "record": "PYSEC-2026-381", "field": "modified"}, {"timestamp": "2026-07-01T22:44:51Z", "date_only": false, "value": "2026-07-01T22:44:51Z", "kind": "other", "label": "Updated", "source": "github", "record": "GHSA-jqq5-wc57-f8hj", "field": "modified"}]}