{"metadata": {"vulnerability": "ghsa-389x-839f-4rhx", "count": 98, "kinds": {"milestone": 26, "sighting": 21, "kev": 0, "other": 51}}, "data": [{"timestamp": "2025-02-03T19:30:53.400Z", "date_only": false, "value": "2025-02-03T19:30:53.400Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2025-25193", "record": "CVE-2025-25193", "field": "cveMetadata.dateReserved", "linked_record": true}, {"timestamp": "2025-02-10T18:14:47Z", "date_only": false, "value": "2025-02-10T18:14:47Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-389x-839f-4rhx", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-02-10T22:02:17.197Z", "date_only": false, "value": "2025-02-10T22:02:17.197Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2025-25193", "record": "CVE-2025-25193", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2025-02-10T22:02:17.197Z", "date_only": false, "value": "2025-02-10T22:02:17.197Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-25193 / GitHub_M", "record": "CVE-2025-25193", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-02-10T22:05:01.214Z", "date_only": false, "value": "2025-02-10T22:05:01.214046Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113981856193211167", "record": "GHSA-389x-839f-4rhx", "field": "creation_timestamp", "uuid": "44bd9a05-ba10-4c46-86cf-fccc09660286", "url": "https://infosec.exchange/users/cve/statuses/113981856193211167"}, {"timestamp": "2025-02-10T22:15:38Z", "date_only": false, "value": "2025-02-10T22:15:38Z", "kind": "other", "label": "Nvd published at", "source": "github", "record": "ghsa-389x-839f-4rhx", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-02-11T15:22:08.933Z", "date_only": false, "value": "2025-02-11T15:22:08.933112Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2025-25193 / CISA-ADP", "record": "CVE-2025-25193", "field": "containers.adp.0.metrics.0.other.content.timestamp", "linked_record": true}, {"timestamp": "2025-02-11T15:22:12.545Z", "date_only": false, "value": "2025-02-11T15:22:12.545Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-25193 / CISA-ADP", "record": "CVE-2025-25193", "field": "containers.adp.0.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-02-14T15:15:16Z", "date_only": false, "value": "2025-02-14T15:15:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4455", "record": "GHSA-389X-839F-4RHX", "field": "creation_timestamp", "uuid": "1c11ce6e-853d-4a60-a636-6887ba2f1bda", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25193\n\ud83d\udd25 CVSS Score: 5.4 (CVSS_V3)\n\ud83d\udd39 Description: ### Summary\nAn unsafe reading of environment file could potentially cause a denial of service in Netty.\nWhen loaded on an Windows application, Netty attemps to load a file that does not exist. If an attacker creates such a large file, the Netty application crash.\n\n### Details\nA similar issue was previously reported in https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv\nThis issue was fixed, but the fix was incomplete in that null-bytes were not counted against the input limit.\n\n\n### PoC\nThe PoC is the same as for https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv with the detail that the file should only contain null-bytes; 0x00.\nWhen the null-bytes are encountered by the `InputStreamReader`, it will issue replacement characters in its charset decoding, which will fill up the line-buffer in the `BufferedReader.readLine()`, because the replacement character is not a line-break character.\n\n### Impact\nImpact is the same as https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv\n\ud83d\udccf Published: 2025-02-10T18:14:47Z\n\ud83d\udccf Modified: 2025-02-14T15:02:31Z\n\ud83d\udd17 References:\n1. https://github.com/netty/netty/security/advisories/GHSA-389x-839f-4rhx\n2. https://nvd.nist.gov/vuln/detail/CVE-2025-25193\n3. https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386\n4. https://github.com/netty/netty", "url": "https://t.me/DarkWebInformer_CVEAlerts/4455", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-21T18:03:38.211Z", "date_only": false, "value": "2025-02-21T18:03:38.211Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-25193", "record": "CVE-2025-25193", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-02-21T18:03:38.211Z", "date_only": false, "value": "2025-02-21T18:03:38.211Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-25193 / CVE", "record": "CVE-2025-25193", "field": "containers.adp.1.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-02-21T18:18:54Z", "date_only": false, "value": "2025-02-21T18:18:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4939", "record": "GHSA-389X-839F-4RHX", "field": "creation_timestamp", "uuid": "bdffb032-bc6f-47f6-9167-d6100e0e35ad", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25193\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4.1.118.Final. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows application, Netty attempts to load a file that does not exist. If an attacker creates such a large file, the Netty application crash. A similar issue was previously reported as CVE-2024-47535. This issue was fixed, but the fix was incomplete in that null-bytes were not counted against the input limit. Commit d1fbda62d3a47835d3fb35db8bd42ecc205a5386 contains an updated fix.\n\ud83d\udccf Published: 2025-02-10T22:02:17.197Z\n\ud83d\udccf Modified: 2025-02-21T18:03:38.211Z\n\ud83d\udd17 References:\n1. https://github.com/netty/netty/security/advisories/GHSA-389x-839f-4rhx\n2. https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386", "url": "https://t.me/DarkWebInformer_CVEAlerts/4939", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-19T14:51:27Z", "date_only": false, "value": "2025-03-19T14:51:27Z", "kind": "other", "label": "Updated", "source": "github", "record": "ghsa-389x-839f-4rhx", "field": "modified"}, {"timestamp": "2025-06-17T12:51:43Z", "date_only": false, "value": "2025-06-17T12:51:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/safer-bot/74e21949896b589baa948e9ed6f5748a", "record": "GHSA-389x-839f-4rhx", "field": "creation_timestamp", "uuid": "03a26ed3-c55d-44bd-ba07-2ee6beca27f5", "url": "https://gist.github.com/safer-bot/74e21949896b589baa948e9ed6f5748a"}, {"timestamp": "2025-07-16T04:44:08Z", "date_only": false, "value": "2025-07-16T04:44:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/safer-bot/a0f60a8d5fe224be81cffcc8c0397e50", "record": "GHSA-389x-839f-4rhx", "field": "creation_timestamp", "uuid": "4b64a5b0-9c07-4df5-8b2e-3ef02568c5bc", "url": "https://gist.github.com/safer-bot/a0f60a8d5fe224be81cffcc8c0397e50"}, {"timestamp": "2025-07-16T05:05:11Z", "date_only": false, "value": "2025-07-16T05:05:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/safer-bot/d143b158efbe93bddedc21cd35d69f96", "record": "GHSA-389x-839f-4rhx", "field": "creation_timestamp", "uuid": "bd8f8486-6290-4ff2-88f1-2ee040bdab35", "url": "https://gist.github.com/safer-bot/d143b158efbe93bddedc21cd35d69f96"}, {"timestamp": "2025-07-16T05:32:18Z", "date_only": false, "value": "2025-07-16T05:32:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/safer-bot/ac258bea45025717f0ed3e9461a069c2", "record": "GHSA-389x-839f-4rhx", "field": "creation_timestamp", "uuid": "a4ec6641-f9bd-4874-855f-e0563564b004", "url": "https://gist.github.com/safer-bot/ac258bea45025717f0ed3e9461a069c2"}, {"timestamp": "2025-07-16T06:05:35Z", "date_only": false, "value": "2025-07-16T06:05:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/safer-bot/678e0ba18d8f78e6a69974ba13c63b56", "record": "GHSA-389x-839f-4rhx", "field": "creation_timestamp", "uuid": "a34f9f29-9124-4897-ba90-f4659b43616c", "url": "https://gist.github.com/safer-bot/678e0ba18d8f78e6a69974ba13c63b56"}, {"timestamp": "2025-07-16T08:01:57Z", "date_only": false, "value": "2025-07-16T08:01:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/safer-bot/2af29f281eeb8d7a86455b607f77d23e", "record": "GHSA-389x-839f-4rhx", "field": "creation_timestamp", "uuid": "5641177c-2e32-4a9e-8cbc-754a7bdc17c3", "url": "https://gist.github.com/safer-bot/2af29f281eeb8d7a86455b607f77d23e"}, {"timestamp": "2025-07-16T08:27:57Z", "date_only": false, "value": "2025-07-16T08:27:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/safer-bot/558d37f41c5ff4ac289f774151dbeb8e", "record": "GHSA-389x-839f-4rhx", "field": "creation_timestamp", "uuid": "09b8971a-9133-4ff9-a500-67d6da502d34", "url": "https://gist.github.com/safer-bot/558d37f41c5ff4ac289f774151dbeb8e"}, {"timestamp": "2025-07-16T09:05:51Z", "date_only": false, "value": "2025-07-16T09:05:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/safer-bot/42c52b7475f1deb88e5e54007f9a06a5", "record": "GHSA-389x-839f-4rhx", "field": "creation_timestamp", "uuid": "dc81276a-dacd-4fa4-bb9d-e2292ddfabd8", "url": "https://gist.github.com/safer-bot/42c52b7475f1deb88e5e54007f9a06a5"}, {"timestamp": "2025-07-16T09:30:30Z", "date_only": false, "value": "2025-07-16T09:30:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/safer-bot/2d598c0e56d4c08d8d3ab8b2c3ce83f3", "record": "GHSA-389x-839f-4rhx", "field": "creation_timestamp", "uuid": "04958f51-81a3-4675-af49-2da57c5d0aab", "url": "https://gist.github.com/safer-bot/2d598c0e56d4c08d8d3ab8b2c3ce83f3"}, {"timestamp": "2025-07-16T10:34:44Z", "date_only": false, "value": "2025-07-16T10:34:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/safer-bot/377e11baa0869e0b381b07a3d7ed6e90", "record": "GHSA-389x-839f-4rhx", "field": "creation_timestamp", "uuid": "6b8244e0-92bd-4fd8-88a7-aad08771b86d", "url": "https://gist.github.com/safer-bot/377e11baa0869e0b381b07a3d7ed6e90"}, {"timestamp": "2025-07-16T10:38:12Z", "date_only": false, "value": "2025-07-16T10:38:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/safer-bot/24c020ed9d2c5206c5029cfb25825bf0", "record": "GHSA-389x-839f-4rhx", "field": "creation_timestamp", "uuid": "eee7e2f0-81b0-4f46-854b-15d3986d2078", "url": "https://gist.github.com/safer-bot/24c020ed9d2c5206c5029cfb25825bf0"}, {"timestamp": "2025-07-16T12:02:49Z", "date_only": false, "value": "2025-07-16T12:02:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/safer-bot/4f0365a5003239f65288d5f184de3512", "record": "GHSA-389x-839f-4rhx", "field": "creation_timestamp", "uuid": "c5840556-f929-42ff-896f-8439f0129bae", "url": "https://gist.github.com/safer-bot/4f0365a5003239f65288d5f184de3512"}, {"timestamp": "2025-07-16T12:26:35Z", "date_only": false, "value": "2025-07-16T12:26:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/safer-bot/9b1964e5d86640580eef7861e4f37f4c", "record": "GHSA-389x-839f-4rhx", "field": "creation_timestamp", "uuid": "180d7707-4afb-4450-a556-ee831ad33d08", "url": "https://gist.github.com/safer-bot/9b1964e5d86640580eef7861e4f37f4c"}, {"timestamp": "2025-07-16T12:59:51Z", "date_only": false, "value": "2025-07-16T12:59:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/safer-bot/f61224522155355958d6a621efd7cfe8", "record": "GHSA-389x-839f-4rhx", "field": "creation_timestamp", "uuid": "06fd4366-996a-41dd-b3a7-8a9631fad7ed", "url": "https://gist.github.com/safer-bot/f61224522155355958d6a621efd7cfe8"}, {"timestamp": "2025-07-16T14:08:37Z", "date_only": false, "value": "2025-07-16T14:08:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/safer-bot/f0ece275d2a5f01cdb6c494e4eda047c", "record": "GHSA-389x-839f-4rhx", "field": "creation_timestamp", "uuid": "8cff4806-df3d-4a23-8ab7-e5739ce50556", "url": "https://gist.github.com/safer-bot/f0ece275d2a5f01cdb6c494e4eda047c"}, {"timestamp": "2025-07-16T15:24:05Z", "date_only": false, "value": "2025-07-16T15:24:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/safer-bot/03f7f0d5931f6af20b42248cd731633a", "record": "GHSA-389x-839f-4rhx", "field": "creation_timestamp", "uuid": "e36d6141-f619-4cc2-8fd6-70988c558314", "url": "https://gist.github.com/safer-bot/03f7f0d5931f6af20b42248cd731633a"}, {"timestamp": "2025-07-16T15:25:48Z", "date_only": false, "value": "2025-07-16T15:25:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/safer-bot/c3d37218b11c97a4e6892cc8227f2a75", "record": "GHSA-389x-839f-4rhx", "field": "creation_timestamp", "uuid": "7a1896ca-25b1-4d48-b861-617a30d65663", "url": "https://gist.github.com/safer-bot/c3d37218b11c97a4e6892cc8227f2a75"}, {"timestamp": "2025-07-16T22:54:47Z", "date_only": false, "value": "2025-07-16T22:54:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/safer-bot/854db19b37d85f8ecc0537be2939d6c9", "record": "GHSA-389x-839f-4rhx", "field": "creation_timestamp", "uuid": "93e41796-1e68-47ed-8a20-f8f09d1e855d", "url": "https://gist.github.com/safer-bot/854db19b37d85f8ecc0537be2939d6c9"}, {"timestamp": "2026-02-03T16:02:30.597Z", "date_only": false, "value": "2026-02-03T16:02:30.597873Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-XR99875", "record": "CLEANSTART-2026-XR99875", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-01T09:05:58.458Z", "date_only": false, "value": "2026-04-01T09:05:58.458627Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-IS43446", "record": "CLEANSTART-2026-IS43446", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-06T02:48:54.465Z", "date_only": false, "value": "2026-04-06T02:48:54.465143Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-VH41554", "record": "CLEANSTART-2026-VH41554", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-10T01:04:00.139Z", "date_only": false, "value": "2026-04-10T01:04:00.139766Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-DP55969", "record": "CLEANSTART-2026-DP55969", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-10T01:04:00.210Z", "date_only": false, "value": "2026-04-10T01:04:00.210981Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-OZ32100", "record": "CLEANSTART-2026-OZ32100", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-10T01:04:01.115Z", "date_only": false, "value": "2026-04-10T01:04:01.115500Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-AA51484", "record": "CLEANSTART-2026-AA51484", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-16T00:38:50.416Z", "date_only": false, "value": "2026-04-16T00:38:50.416393Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-QG74410", "record": "CLEANSTART-2026-QG74410", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-16T00:40:49.655Z", "date_only": false, "value": "2026-04-16T00:40:49.655378Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-EZ90321", "record": "CLEANSTART-2026-EZ90321", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-16T00:42:51.354Z", "date_only": false, "value": "2026-04-16T00:42:51.354420Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-CF62516", "record": "CLEANSTART-2026-CF62516", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-18T12:57:05.166Z", "date_only": false, "value": "2026-05-18T12:57:05.166140Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-PK73499", "record": "CLEANSTART-2026-PK73499", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-18T13:02:30.461Z", "date_only": false, "value": "2026-05-18T13:02:30.461225Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-DD05788", "record": "CLEANSTART-2026-DD05788", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-18T13:15:02.086Z", "date_only": false, "value": "2026-05-18T13:15:02.086653Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-GH89210", "record": "CLEANSTART-2026-GH89210", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-18T13:18:58.006Z", "date_only": false, "value": "2026-05-18T13:18:58.006912Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-LE11246", "record": "CLEANSTART-2026-LE11246", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-18T13:26:54.415Z", "date_only": false, "value": "2026-05-18T13:26:54.415325Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-RN56220", "record": "CLEANSTART-2026-RN56220", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-18T13:46:33.487Z", "date_only": false, "value": "2026-05-18T13:46:33.487376Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-KU61465", "record": "CLEANSTART-2026-KU61465", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-08T12:39:38.316Z", "date_only": false, "value": "2026-06-08T12:39:38.316470Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-MX76059", "record": "CLEANSTART-2026-MX76059", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-08T14:28:06.041Z", "date_only": false, "value": "2026-06-08T14:28:06.041003Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-CP46043", "record": "CLEANSTART-2026-CP46043", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-09T10:07:30.117Z", "date_only": false, "value": "2026-07-09T10:07:30.117480Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-IY44515", "record": "CLEANSTART-2026-IY44515", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-30T07:10:53Z", "date_only": false, "value": "2026-07-30T07:10:53Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-CU18187", "record": "CLEANSTART-2026-CU18187", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-30T07:10:53Z", "date_only": false, "value": "2026-07-30T07:10:53Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-IW13101", "record": "CLEANSTART-2026-IW13101", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-30T07:10:53Z", "date_only": false, "value": "2026-07-30T07:10:53Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-NP47613", "record": "CLEANSTART-2026-NP47613", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-14T12:25:42Z", "date_only": false, "value": "2026-08-14T12:25:42Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-PE68088", "record": "CLEANSTART-2026-PE68088", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-AA51484", "record": "CLEANSTART-2026-AA51484", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-CP46043", "record": "CLEANSTART-2026-CP46043", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-IY44515", "record": "CLEANSTART-2026-IY44515", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-OZ32100", "record": "CLEANSTART-2026-OZ32100", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-QG74410", "record": "CLEANSTART-2026-QG74410", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-AA51484", "record": "CLEANSTART-2026-AA51484", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-CP46043", "record": "CLEANSTART-2026-CP46043", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-IY44515", "record": "CLEANSTART-2026-IY44515", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-OZ32100", "record": "CLEANSTART-2026-OZ32100", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-QG74410", "record": "CLEANSTART-2026-QG74410", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T10:32:36.886Z", "date_only": false, "value": "2026-09-18T10:32:36.886257Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-BA63285", "record": "CLEANSTART-2026-BA63285", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-CF62516", "record": "CLEANSTART-2026-CF62516", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-CU18187", "record": "CLEANSTART-2026-CU18187", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-DD05788", "record": "CLEANSTART-2026-DD05788", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-DP55969", "record": "CLEANSTART-2026-DP55969", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-EZ90321", "record": "CLEANSTART-2026-EZ90321", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-GH89210", "record": "CLEANSTART-2026-GH89210", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-IS43446", "record": "CLEANSTART-2026-IS43446", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-IW13101", "record": "CLEANSTART-2026-IW13101", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-KU61465", "record": "CLEANSTART-2026-KU61465", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-LE11246", "record": "CLEANSTART-2026-LE11246", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-MX76059", "record": "CLEANSTART-2026-MX76059", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-NP47613", "record": "CLEANSTART-2026-NP47613", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-PK73499", "record": "CLEANSTART-2026-PK73499", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-RN56220", "record": "CLEANSTART-2026-RN56220", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-VH41554", "record": "CLEANSTART-2026-VH41554", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-XR99875", "record": "CLEANSTART-2026-XR99875", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-CF62516", "record": "CLEANSTART-2026-CF62516", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-CU18187", "record": "CLEANSTART-2026-CU18187", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-DD05788", "record": "CLEANSTART-2026-DD05788", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-DP55969", "record": "CLEANSTART-2026-DP55969", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-EZ90321", "record": "CLEANSTART-2026-EZ90321", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-GH89210", "record": "CLEANSTART-2026-GH89210", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-IS43446", "record": "CLEANSTART-2026-IS43446", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-IW13101", "record": "CLEANSTART-2026-IW13101", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-KU61465", "record": "CLEANSTART-2026-KU61465", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-LE11246", "record": "CLEANSTART-2026-LE11246", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-MX76059", "record": "CLEANSTART-2026-MX76059", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-NP47613", "record": "CLEANSTART-2026-NP47613", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-PK73499", "record": "CLEANSTART-2026-PK73499", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-RN56220", "record": "CLEANSTART-2026-RN56220", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-VH41554", "record": "CLEANSTART-2026-VH41554", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-XR99875", "record": "CLEANSTART-2026-XR99875", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-10-15T12:00:00Z", "date_only": false, "value": "2026-10-15T12:00:00Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-BA63285", "record": "CLEANSTART-2026-BA63285", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-30T15:43:04.004Z", "date_only": false, "value": "2026-10-30T15:43:04.004374Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-PE68088", "record": "CLEANSTART-2026-PE68088", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}], "metrics": {"as_of": "2026-11-15T11:21:01.784Z", "anchors": {"origin": {"timestamp": "2025-02-10T18:14:47Z", "date_only": false, "value": "2025-02-10T18:14:47Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-389x-839f-4rhx", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-02-10T18:14:47Z", "date_only": false, "value": "2025-02-10T18:14:47Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-389x-839f-4rhx", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-02-14T15:15:16Z", "date_only": false, "value": "2025-02-14T15:15:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4455", "record": "GHSA-389X-839F-4RHX", "field": "creation_timestamp", "uuid": "1c11ce6e-853d-4a60-a636-6887ba2f1bda", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25193\n\ud83d\udd25 CVSS Score: 5.4 (CVSS_V3)\n\ud83d\udd39 Description: ### Summary\nAn unsafe reading of environment file could potentially cause a denial of service in Netty.\nWhen loaded on an Windows application, Netty attemps to load a file that does not exist. If an attacker creates such a large file, the Netty application crash.\n\n### Details\nA similar issue was previously reported in https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv\nThis issue was fixed, but the fix was incomplete in that null-bytes were not counted against the input limit.\n\n\n### PoC\nThe PoC is the same as for https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv with the detail that the file should only contain null-bytes; 0x00.\nWhen the null-bytes are encountered by the `InputStreamReader`, it will issue replacement characters in its charset decoding, which will fill up the line-buffer in the `BufferedReader.readLine()`, because the replacement character is not a line-break character.\n\n### Impact\nImpact is the same as https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv\n\ud83d\udccf Published: 2025-02-10T18:14:47Z\n\ud83d\udccf Modified: 2025-02-14T15:02:31Z\n\ud83d\udd17 References:\n1. https://github.com/netty/netty/security/advisories/GHSA-389x-839f-4rhx\n2. https://nvd.nist.gov/vuln/detail/CVE-2025-25193\n3. https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386\n4. https://github.com/netty/netty", "url": "https://t.me/DarkWebInformer_CVEAlerts/4455", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 334829.0, "hours": 93.00805555555556, "days": 3.8753356481481482, "min_seconds": 334829.0, "max_seconds": 334829.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-02-10T18:14:47Z", "date_only": false, "value": "2025-02-10T18:14:47Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-389x-839f-4rhx", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-02-14T15:15:16Z", "date_only": false, "value": "2025-02-14T15:15:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4455", "record": "GHSA-389X-839F-4RHX", "field": "creation_timestamp", "uuid": "1c11ce6e-853d-4a60-a636-6887ba2f1bda", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25193\n\ud83d\udd25 CVSS Score: 5.4 (CVSS_V3)\n\ud83d\udd39 Description: ### Summary\nAn unsafe reading of environment file could potentially cause a denial of service in Netty.\nWhen loaded on an Windows application, Netty attemps to load a file that does not exist. If an attacker creates such a large file, the Netty application crash.\n\n### Details\nA similar issue was previously reported in https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv\nThis issue was fixed, but the fix was incomplete in that null-bytes were not counted against the input limit.\n\n\n### PoC\nThe PoC is the same as for https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv with the detail that the file should only contain null-bytes; 0x00.\nWhen the null-bytes are encountered by the `InputStreamReader`, it will issue replacement characters in its charset decoding, which will fill up the line-buffer in the `BufferedReader.readLine()`, because the replacement character is not a line-break character.\n\n### Impact\nImpact is the same as https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv\n\ud83d\udccf Published: 2025-02-10T18:14:47Z\n\ud83d\udccf Modified: 2025-02-14T15:02:31Z\n\ud83d\udd17 References:\n1. https://github.com/netty/netty/security/advisories/GHSA-389x-839f-4rhx\n2. https://nvd.nist.gov/vuln/detail/CVE-2025-25193\n3. https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386\n4. https://github.com/netty/netty", "url": "https://t.me/DarkWebInformer_CVEAlerts/4455", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 55530374.784563, "hours": 15425.104106823055, "days": 642.7126711176273, "min_seconds": 55530374.784563, "max_seconds": 55530374.784563, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-02-10T18:14:47Z", "date_only": false, "value": "2025-02-10T18:14:47Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-389x-839f-4rhx", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T11:21:01.784Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 55195545.784563, "hours": 15332.0960512675, "days": 638.8373354694792, "min_seconds": 55195545.784563, "max_seconds": 55195545.784563, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-02-14T15:15:16Z", "date_only": false, "value": "2025-02-14T15:15:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4455", "record": "GHSA-389X-839F-4RHX", "field": "creation_timestamp", "uuid": "1c11ce6e-853d-4a60-a636-6887ba2f1bda", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25193\n\ud83d\udd25 CVSS Score: 5.4 (CVSS_V3)\n\ud83d\udd39 Description: ### Summary\nAn unsafe reading of environment file could potentially cause a denial of service in Netty.\nWhen loaded on an Windows application, Netty attemps to load a file that does not exist. If an attacker creates such a large file, the Netty application crash.\n\n### Details\nA similar issue was previously reported in https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv\nThis issue was fixed, but the fix was incomplete in that null-bytes were not counted against the input limit.\n\n\n### PoC\nThe PoC is the same as for https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv with the detail that the file should only contain null-bytes; 0x00.\nWhen the null-bytes are encountered by the `InputStreamReader`, it will issue replacement characters in its charset decoding, which will fill up the line-buffer in the `BufferedReader.readLine()`, because the replacement character is not a line-break character.\n\n### Impact\nImpact is the same as https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv\n\ud83d\udccf Published: 2025-02-10T18:14:47Z\n\ud83d\udccf Modified: 2025-02-14T15:02:31Z\n\ud83d\udd17 References:\n1. https://github.com/netty/netty/security/advisories/GHSA-389x-839f-4rhx\n2. https://nvd.nist.gov/vuln/detail/CVE-2025-25193\n3. https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386\n4. https://github.com/netty/netty", "url": "https://t.me/DarkWebInformer_CVEAlerts/4455", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T11:21:01.784Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}