{"metadata": {"vulnerability": "cve-2025-43865", "count": 50, "kinds": {"milestone": 10, "sighting": 16, "kev": 0, "other": 24}}, "data": [{"timestamp": "2025-04-17T20:07:08.556Z", "date_only": false, "value": "2025-04-17T20:07:08.556Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-43865", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-04-24T14:55:19Z", "date_only": false, "value": "2025-04-24T14:55:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/remix-run/react-router/security/advisories/GHSA-cpj6-fhp6-mr6j", "record": "CVE-2025-43865", "field": "creation_timestamp", "uuid": "73671ca9-34eb-45b6-8d8f-1a735782df2d", "url": "https://github.com/remix-run/react-router/security/advisories/GHSA-cpj6-fhp6-mr6j"}, {"timestamp": "2025-04-24T16:31:32Z", "date_only": false, "value": "2025-04-24T16:31:32Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CPJ6-FHP6-MR6J", "record": "GHSA-CPJ6-FHP6-MR6J", "field": "published"}, {"timestamp": "2025-04-25T00:18:53.222Z", "date_only": false, "value": "2025-04-25T00:18:53.222Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-43865", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-04-25T00:18:53.222Z", "date_only": false, "value": "2025-04-25T00:18:53.222000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:13904", "record": "RHSA-2025:13904", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-04-25T00:18:53.222Z", "date_only": false, "value": "2025-04-25T00:18:53.222Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2025-43865", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-25T01:00:42.990Z", "date_only": false, "value": "2025-04-25T01:00:42.990026+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:13904", "record": "RHSA-2025:13904", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-04-25T01:10:55Z", "date_only": false, "value": "2025-04-25T01:10:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13366", "record": "CVE-2025-43865", "field": "creation_timestamp", "uuid": "a55b671b-8d68-448e-a7c0-5bc3c66bafec", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-43865\n\ud83d\udd25 CVSS Score: 8.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H)\n\ud83d\udd39 Description: React Router is a router for React. In versions on the 7.0 branch prior to version 7.5.2, it's possible to modify pre-rendered data by adding a header to the request. This allows to completely spoof its contents and modify all the values \u200b\u200bof the data object passed to the HTML. This issue has been patched in version 7.5.2.\n\ud83d\udccf Published: 2025-04-25T00:18:53.222Z\n\ud83d\udccf Modified: 2025-04-25T00:18:53.222Z\n\ud83d\udd17 References:\n1. https://github.com/remix-run/react-router/security/advisories/GHSA-cpj6-fhp6-mr6j\n2. https://github.com/remix-run/react-router/commit/c84302972a152d851cf5dd859ff332b354b70111\n3. https://github.com/remix-run/react-router/blob/e6c53a0130559b4a9bd47f9cf76ea5b08a69868a/packages/react-router/lib/server-runtime/routes.ts#L87", "url": "https://t.me/DarkWebInformer_CVEAlerts/13366"}, {"timestamp": "2025-04-25T01:15:43Z", "date_only": false, "value": "2025-04-25T01:15:43Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-CPJ6-FHP6-MR6J", "record": "GHSA-CPJ6-FHP6-MR6J", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-04-25T01:15:43.270Z", "date_only": false, "value": "2025-04-25T01:15:43.270", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-43865", "record": "FKIE_CVE-2025-43865", "field": "published"}, {"timestamp": "2025-04-25T01:30:10.137Z", "date_only": false, "value": "2025-04-25T01:30:10.137691Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnm2ieuxpjk2", "record": "CVE-2025-43865", "field": "creation_timestamp", "uuid": "68b628e4-bb0b-40bc-959b-fde732a42df5", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnm2ieuxpjk2"}, {"timestamp": "2025-04-25T03:30:33Z", "date_only": false, "value": "2025-04-25T03:30:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/oGnFJdmXUCqYx0_xYR0D8dpnhpl9VxD3P3IPRWVfgfpPSsY", "record": "CVE-2025-43865", "field": "creation_timestamp", "uuid": "d91fc631-2d0a-46d9-a75a-758ab10e5d63"}, {"timestamp": "2025-04-25T03:48:13.514Z", "date_only": false, "value": "2025-04-25T03:48:13.514676Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114396554360753835", "record": "CVE-2025-43865", "field": "creation_timestamp", "uuid": "1d854668-34bb-441c-9206-291440487ff8", "url": "https://mastodon.social/users/CyberSignaler/statuses/114396554360753835"}, {"timestamp": "2025-04-25T04:20:06.731Z", "date_only": false, "value": "2025-04-25T04:20:06.731448Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnmen2uyae2y", "record": "CVE-2025-43865", "field": "creation_timestamp", "uuid": "5dd73cf4-fdad-4873-accf-c4e6dca17fc8", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnmen2uyae2y"}, {"timestamp": "2025-04-25T04:58:32Z", "date_only": false, "value": "2025-04-25T04:58:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/23722", "record": "CVE-2025-43865", "field": "creation_timestamp", "uuid": "435ffc74-a581-48fb-9496-9d2d8a3e98a9", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-43865 - React Router HTTP Header Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-43865 \nPublished : April 25, 2025, 1:15 a.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : React Router is a router for React. In versions on the 7.0 branch prior to version 7.5.2, it's possible to modify pre-rendered data by adding a header to the request. This allows to completely spoof its contents and modify all the values \u200b\u200bof the data object passed to the HTML. This issue has been patched in version 7.5.2. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/23722"}, {"timestamp": "2025-04-25T15:11:14.012Z", "date_only": false, "value": "2025-04-25T15:11:14.012087Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-43865", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-25T15:11:14.012Z", "date_only": false, "value": "2025-04-25T15:11:14.012087Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-43865", "record": "FKIE_CVE-2025-43865", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-25T15:16:00.202Z", "date_only": false, "value": "2025-04-25T15:16:00.202Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-43865", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-25T15:16:00.202Z", "date_only": false, "value": "2025-04-25T15:16:00.202Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-43865", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-26T05:43:33.515Z", "date_only": false, "value": "2025-04-26T05:43:33.515558Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/azu.bsky.social/post/3lnozraetzy2h", "record": "CVE-2025-43865", "field": "creation_timestamp", "uuid": "54794b6b-aba6-4fb8-9163-01455ad049c5", "url": "https://bsky.app/profile/azu.bsky.social/post/3lnozraetzy2h"}, {"timestamp": "2025-04-28T01:24:38.069Z", "date_only": false, "value": "2025-04-28T01:24:38.069811Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lntma2tzys2b", "record": "CVE-2025-43865", "field": "creation_timestamp", "uuid": "53de9e8d-c0a1-4e80-a53e-d070781dc9be", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lntma2tzys2b"}, {"timestamp": "2025-04-28T06:04:02Z", "date_only": false, "value": "2025-04-28T06:04:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/6FX2IebycktZzQVQqd5RFhAkDCZpjEYMsyZyU71AztwjdDiy", "record": "CVE-2025-43865", "field": "creation_timestamp", "uuid": "15de7fa2-66dd-4fff-9a68-ff8611b67f75"}, {"timestamp": "2025-04-28T09:00:07Z", "date_only": false, "value": "2025-04-28T09:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/hwxTPI13zjfOP4QVdjfyo4btTJ66KygK04v-mdNXcVwmgy0", "record": "CVE-2025-43865", "field": "creation_timestamp", "uuid": "94e6330a-fe89-41fb-a7a0-5d2ede813e54"}, {"timestamp": "2025-04-28T09:55:10.430Z", "date_only": false, "value": "2025-04-28T09:55:10.430202Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lnuiqywno22r", "record": "cve-2025-43865", "field": "creation_timestamp", "uuid": "dca66886-cb27-4709-a9cb-c99b7f61996c", "url": "https://bsky.app/profile/shiojiri.com/post/3lnuiqywno22r"}, {"timestamp": "2025-06-30T22:00:00Z", "date_only": false, "value": "2025-06-30T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1435", "record": "WID-SEC-W-2025-1435", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-06-30T22:00:00Z", "date_only": false, "value": "2025-06-30T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1435", "record": "WID-SEC-W-2025-1435", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-06-30T22:00:00Z", "date_only": false, "value": "2025-06-30T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1435", "record": "WID-SEC-W-2025-1435", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-06-30T22:00:00Z", "date_only": false, "value": "2025-06-30T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1435", "record": "WID-SEC-W-2025-1435", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-07-01T15:23:21.182Z", "date_only": false, "value": "2025-07-01T15:23:21.182+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1435", "record": "WID-SEC-W-2025-1435", "field": "document.tracking.generator.date"}, {"timestamp": "2025-08-14T16:11:10Z", "date_only": false, "value": "2025-08-14T16:11:10+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:13904", "record": "RHSA-2025:13904", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-08-14T16:11:10Z", "date_only": false, "value": "2025-08-14T16:11:10+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2025:13904", "record": "RHSA-2025:13904", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2025-08-14T16:11:10Z", "date_only": false, "value": "2025-08-14T16:11:10+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2025:13904", "record": "RHSA-2025:13904", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-12-18T00:00:00Z", "date_only": true, "value": "2025-12-18", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1127", "record": "CERTFR-2025-AVI-1127", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-12-19T00:00:00Z", "date_only": false, "value": "2025-12-19T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1127", "record": "CERTFR-2025-AVI-1127", "field": "last_revision_date"}, {"timestamp": "2025-12-19T00:00:00Z", "date_only": false, "value": "2025-12-19T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1127", "record": "CERTFR-2025-AVI-1127", "field": "initial_release_date"}, {"timestamp": "2025-12-19T00:00:00Z", "date_only": false, "value": "2025-12-19T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1127", "record": "CERTFR-2025-AVI-1127", "field": "revisions.0.revision_date"}, {"timestamp": "2025-12-19T15:45:29.028Z", "date_only": false, "value": "2025-12-19T15:45:29.028342Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3madzvrat662z", "record": "CVE-2025-43865", "field": "creation_timestamp", "uuid": "fbde3971-1208-4df8-aaf7-7e676556353d", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3madzvrat662z"}, {"timestamp": "2026-01-15T00:00:00Z", "date_only": true, "value": "2026-01-15", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0054", "record": "CERTFR-2026-AVI-0054", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-01-16T00:00:00Z", "date_only": false, "value": "2026-01-16T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0054", "record": "CERTFR-2026-AVI-0054", "field": "last_revision_date"}, {"timestamp": "2026-01-16T00:00:00Z", "date_only": false, "value": "2026-01-16T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0054", "record": "CERTFR-2026-AVI-0054", "field": "initial_release_date"}, {"timestamp": "2026-01-16T00:00:00Z", "date_only": false, "value": "2026-01-16T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0054", "record": "CERTFR-2026-AVI-0054", "field": "revisions.0.revision_date"}, {"timestamp": "2026-01-16T15:50:19.907Z", "date_only": false, "value": "2026-01-16T15:50:19.907135Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mckha7mnad2z", "record": "CVE-2025-43865", "field": "creation_timestamp", "uuid": "5c873855-0297-4511-b93a-8c8b0d98c793", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mckha7mnad2z"}, {"timestamp": "2026-01-16T22:01:19Z", "date_only": false, "value": "2026-01-16T22:01:19Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CPJ6-FHP6-MR6J", "record": "GHSA-CPJ6-FHP6-MR6J", "field": "modified"}, {"timestamp": "2026-06-17T09:24:40.220Z", "date_only": false, "value": "2026-06-17T09:24:40.220", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-43865", "record": "FKIE_CVE-2025-43865", "field": "lastModified"}, {"timestamp": "2026-07-20T22:00:04.295Z", "date_only": false, "value": "2026-07-20T22:00:04.295806Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/371", "record": "CVE-2025-43865", "field": "creation_timestamp", "uuid": "525709ea-ed1b-4340-969b-c8f4df475d79", "url": "https://t.me/pphm_HackerNews/371"}, {"timestamp": "2026-07-21T00:00:10.535Z", "date_only": false, "value": "2026-07-21T00:00:10.535907Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/371", "record": "CVE-2025-43865", "field": "creation_timestamp", "uuid": "85ddf2d2-9aa9-42f8-8f85-012ac83bec9d", "url": "https://t.me/pphm_HackerNews/371"}, {"timestamp": "2026-09-04T00:36:24Z", "date_only": false, "value": "2026-09-04T00:36:24+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:13904", "record": "RHSA-2025:13904", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-15T12:13:35Z", "date_only": false, "value": "2026-10-15T12:13:35+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:13904", "record": "RHSA-2025:13904", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-15T12:13:35Z", "date_only": false, "value": "2026-10-15T12:13:35+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2025:13904", "record": "RHSA-2025:13904", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-15T12:13:35Z", "date_only": false, "value": "2026-10-15T12:13:35+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2025:13904", "record": "RHSA-2025:13904", "field": "document.tracking.current_release_date"}]}