{"metadata": {"vulnerability": "cve-2025-53967", "count": 32, "kinds": {"milestone": 4, "sighting": 21, "kev": 0, "other": 7}}, "data": [{"timestamp": "2025-07-16T00:00:00Z", "date_only": false, "value": "2025-07-16T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-53967", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-09-29T17:54:15Z", "date_only": false, "value": "2025-09-29T17:54:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/GLips/Figma-Context-MCP/security/advisories/GHSA-gxw4-4fc5-9gr5", "record": "CVE-2025-53967", "field": "creation_timestamp", "uuid": "e690da13-6e4d-4256-a247-1bc26b1e5e6d", "url": "https://github.com/GLips/Figma-Context-MCP/security/advisories/GHSA-gxw4-4fc5-9gr5", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-09-30T17:01:42Z", "date_only": false, "value": "2025-09-30T17:01:42Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GXW4-4FC5-9GR5", "record": "GHSA-GXW4-4FC5-9GR5", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-09-30T17:01:42Z", "date_only": false, "value": "2025-09-30T17:01:42Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GXW4-4FC5-9GR5", "record": "GHSA-GXW4-4FC5-9GR5", "field": "modified", "linked_record": true}, {"timestamp": "2025-10-08T00:00:00Z", "date_only": false, "value": "2025-10-08T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-53967", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-10-08T08:58:00Z", "date_only": false, "value": "2025-10-08T08:58:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/10/severe-figma-mcp-vulnerability-lets.html", "record": "CVE-2025-53967", "field": "creation_timestamp", "uuid": "c687370c-f23a-462a-8005-46077605fde8", "url": "https://thehackernews.com/2025/10/severe-figma-mcp-vulnerability-lets.html"}, {"timestamp": "2025-10-08T10:32:11Z", "date_only": false, "value": "2025-10-08T10:32:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/10/08/severe-figma-mcp-vulnerability-lets.html", "record": "CVE-2025-53967", "field": "creation_timestamp", "uuid": "514cc8b8-baad-4109-9654-102f18ffac77", "url": "https://threatintel.cc/2025/10/08/severe-figma-mcp-vulnerability-lets.html"}, {"timestamp": "2025-10-08T12:32:02.855Z", "date_only": false, "value": "2025-10-08T12:32:02.855877Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/115338557689722043", "record": "CVE-2025-53967", "field": "creation_timestamp", "uuid": "becce8b2-b553-4a23-a146-90e367c68934", "url": "https://infosec.exchange/users/edwardk/statuses/115338557689722043"}, {"timestamp": "2025-10-08T12:53:20.729Z", "date_only": false, "value": "2025-10-08T12:53:20.729729Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/115338641430775257", "record": "CVE-2025-53967", "field": "creation_timestamp", "uuid": "3abcbaeb-2239-49e2-8e7d-827e3674d3c6", "url": "https://infosec.exchange/users/jbhall56/statuses/115338641430775257"}, {"timestamp": "2025-10-08T12:53:29.985Z", "date_only": false, "value": "2025-10-08T12:53:29.985522Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3m2oopvldos25", "record": "CVE-2025-53967", "field": "creation_timestamp", "uuid": "e5ad449f-7545-469c-95cd-81a9dc609bf5", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3m2oopvldos25"}, {"timestamp": "2025-10-08T15:14:02Z", "date_only": false, "value": "2025-10-08T15:14:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.darkreading.com/vulnerabilities-threats/figma-mcp-server-agentic-ai-compromise", "record": "CVE-2025-53967", "field": "creation_timestamp", "uuid": "8aa5dd40-e9c3-450a-9d1c-a3f223cb262b", "url": "https://www.darkreading.com/vulnerabilities-threats/figma-mcp-server-agentic-ai-compromise"}, {"timestamp": "2025-10-08T16:21:49.713Z", "date_only": false, "value": "2025-10-08T16:21:49.713Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2025-53967", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-08T17:15:34.507Z", "date_only": false, "value": "2025-10-08T17:15:34.507", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-53967", "record": "FKIE_CVE-2025-53967", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-10-08T17:18:11.569Z", "date_only": false, "value": "2025-10-08T17:18:11.569367Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-53967", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-10-08T17:18:11.569Z", "date_only": false, "value": "2025-10-08T17:18:11.569367Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-53967", "record": "FKIE_CVE-2025-53967", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-10-08T17:18:20.747Z", "date_only": false, "value": "2025-10-08T17:18:20.747Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-53967", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-08T17:18:20.747Z", "date_only": false, "value": "2025-10-08T17:18:20.747Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-53967", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-08T17:31:20.546Z", "date_only": false, "value": "2025-10-08T17:31:20.546796Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecindustry.bsky.social/post/3m2p6araspt2m", "record": "CVE-2025-53967", "field": "creation_timestamp", "uuid": "dd54f309-8ff7-4dbb-8b21-cef4f2177443", "url": "https://bsky.app/profile/infosecindustry.bsky.social/post/3m2p6araspt2m"}, {"timestamp": "2025-10-08T17:37:08.152Z", "date_only": false, "value": "2025-10-08T17:37:08.152836Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ransomnews.online/post/3m2p6l457ol2n", "record": "CVE-2025-53967", "field": "creation_timestamp", "uuid": "966e5661-89a4-47cf-bd11-2eb1f46b679e", "url": "https://bsky.app/profile/ransomnews.online/post/3m2p6l457ol2n"}, {"timestamp": "2025-10-08T18:36:32.560Z", "date_only": false, "value": "2025-10-08T18:36:32.560399Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115339990628749680", "record": "cve-2025-53967", "field": "creation_timestamp", "uuid": "f5eb61ac-6e61-4b74-b981-3fbc3013c760", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/115339990628749680"}, {"timestamp": "2025-10-08T20:38:09Z", "date_only": false, "value": "2025-10-08T20:38:09.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/dqaBGKE6vVcTQUq8q67vdlDN9jh8IfDDw0Pvld0S1ZgXGg", "record": "CVE-2025-53967", "field": "creation_timestamp", "uuid": "3a60b5ec-4689-4762-98aa-f3bfbf05f6f0"}, {"timestamp": "2025-10-09T01:33:30.664Z", "date_only": false, "value": "2025-10-09T01:33:30.664722Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3m2pz6wkwel2o", "record": "CVE-2025-53967", "field": "creation_timestamp", "uuid": "a78ab2a3-c72a-4e2b-bfd4-389fdbe86b6b", "url": "https://bsky.app/profile/offseq.bsky.social/post/3m2pz6wkwel2o"}, {"timestamp": "2025-10-09T05:28:30.441Z", "date_only": false, "value": "2025-10-09T05:28:30.441050Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ycftbwc.bsky.social/post/3m2qgd5x7tj2p", "record": "CVE-2025-53967", "field": "creation_timestamp", "uuid": "e54cb200-ee78-497f-bb0c-6d43b70e45d1", "url": "https://bsky.app/profile/ycftbwc.bsky.social/post/3m2qgd5x7tj2p"}, {"timestamp": "2025-10-09T12:24:45.709Z", "date_only": false, "value": "2025-10-09T12:24:45.709310Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/115344191343944811", "record": "CVE-2025-53967", "field": "creation_timestamp", "uuid": "01a0cd7a-cf93-4164-84be-e8f354748431", "url": "https://infosec.exchange/users/jbhall56/statuses/115344191343944811"}, {"timestamp": "2025-10-09T12:24:56.470Z", "date_only": false, "value": "2025-10-09T12:24:56.470128Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3m2r5lr6tac2o", "record": "CVE-2025-53967", "field": "creation_timestamp", "uuid": "cc8ddd80-7191-4adf-9165-192d88c9b027", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3m2r5lr6tac2o"}, {"timestamp": "2025-10-10T08:35:28Z", "date_only": false, "value": "2025-10-10T08:35:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/xakep_ru/18299", "record": "CVE-2025-53967", "field": "creation_timestamp", "uuid": "99df8849-b9e2-481b-99d3-3f37afc4fbba", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Figma MCP \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Imperva \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 figma-developer-mcp (Model Context Protocol, MCP). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\nhttps://xakep.ru/2025/10/10/cve-2025-53967/", "url": "https://t.me/xakep_ru/18299", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-10-11T17:42:58.309Z", "date_only": false, "value": "2025-10-11T17:42:58.309853Z", "kind": "sighting", "label": "Seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/115356767060480905", "record": "CVE-2025-53967", "field": "creation_timestamp", "uuid": "6694cc42-38bf-4e3a-b5e3-09757ba8050d", "url": "https://mstdn.ca/users/rfwaveio/statuses/115356767060480905"}, {"timestamp": "2025-12-28T09:34:45.836Z", "date_only": false, "value": "2025-12-28T09:34:45.836905Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mazzf5fyor2n", "record": "CVE-2025-53967", "field": "creation_timestamp", "uuid": "5515c281-26aa-4692-b109-c4aac8178376", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mazzf5fyor2n"}, {"timestamp": "2026-01-27T04:49:06.758Z", "date_only": false, "value": "2026-01-27T04:49:06.758032Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mdexfxxwgi2m", "record": "CVE-2025-53967", "field": "creation_timestamp", "uuid": "eb8b3cb8-777f-4904-93bd-c9bfa6ce3fc1", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mdexfxxwgi2m"}, {"timestamp": "2026-08-09T04:17:03.552Z", "date_only": false, "value": "2026-08-09T04:17:03.552163Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Intel_Encyclopedia/857", "record": "CVE-2025-53967", "field": "creation_timestamp", "uuid": "0d699a48-16d5-45ef-aff9-f73956b0653d", "url": "https://t.me/Intel_Encyclopedia/857"}, {"timestamp": "2026-08-10T00:00:31.405Z", "date_only": false, "value": "2026-08-10T00:00:31.405811Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Intel_Encyclopedia/857", "record": "CVE-2025-53967", "field": "creation_timestamp", "uuid": "7d4e0608-759c-44e9-adb3-52c513b850e2", "url": "https://t.me/Intel_Encyclopedia/857"}, {"timestamp": "2026-10-08T13:10:00.200Z", "date_only": false, "value": "2026-10-08T13:10:00.200", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-53967", "record": "FKIE_CVE-2025-53967", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-13T09:53:35.094Z", "anchors": {"origin": {"timestamp": "2025-09-30T17:01:42Z", "date_only": false, "value": "2025-09-30T17:01:42Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GXW4-4FC5-9GR5", "record": "GHSA-GXW4-4FC5-9GR5", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-09-30T17:01:42Z", "date_only": false, "value": "2025-09-30T17:01:42Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GXW4-4FC5-9GR5", "record": "GHSA-GXW4-4FC5-9GR5", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2025-09-29T17:54:15Z", "date_only": false, "value": "2025-09-29T17:54:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/GLips/Figma-Context-MCP/security/advisories/GHSA-gxw4-4fc5-9gr5", "record": "CVE-2025-53967", "field": "creation_timestamp", "uuid": "e690da13-6e4d-4256-a247-1bc26b1e5e6d", "url": "https://github.com/GLips/Figma-Context-MCP/security/advisories/GHSA-gxw4-4fc5-9gr5", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": -83247.0, "hours": -23.124166666666667, "days": -0.9635069444444444, "min_seconds": -83247.0, "max_seconds": -83247.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2025-09-30T17:01:42Z", "date_only": false, "value": "2025-09-30T17:01:42Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GXW4-4FC5-9GR5", "record": "GHSA-GXW4-4FC5-9GR5", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2025-09-29T17:54:15Z", "date_only": false, "value": "2025-09-29T17:54:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/GLips/Figma-Context-MCP/security/advisories/GHSA-gxw4-4fc5-9gr5", "record": "CVE-2025-53967", "field": "creation_timestamp", "uuid": "e690da13-6e4d-4256-a247-1bc26b1e5e6d", "url": "https://github.com/GLips/Figma-Context-MCP/security/advisories/GHSA-gxw4-4fc5-9gr5", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 35311913.094998, "hours": 9808.864748610556, "days": 408.70269785877315, "min_seconds": 35311913.094998, "max_seconds": 35311913.094998, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-09-30T17:01:42Z", "date_only": false, "value": "2025-09-30T17:01:42Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GXW4-4FC5-9GR5", "record": "GHSA-GXW4-4FC5-9GR5", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-13T09:53:35.094Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 35395160.094998, "hours": 9831.988915277223, "days": 409.6662048032176, "min_seconds": 35395160.094998, "max_seconds": 35395160.094998, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-09-29T17:54:15Z", "date_only": false, "value": "2025-09-29T17:54:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/GLips/Figma-Context-MCP/security/advisories/GHSA-gxw4-4fc5-9gr5", "record": "CVE-2025-53967", "field": "creation_timestamp", "uuid": "e690da13-6e4d-4256-a247-1bc26b1e5e6d", "url": "https://github.com/GLips/Figma-Context-MCP/security/advisories/GHSA-gxw4-4fc5-9gr5", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-13T09:53:35.094Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}