{"metadata": {"vulnerability": "ghsa-6w4m-2xhg-2658", "count": 14, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2022-08-07T00:00:00Z", "date_only": false, "value": "2022-08-07T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2022-37454", "record": "CVE-2022-37454", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-10-21T00:00:00Z", "date_only": false, "value": "2022-10-21T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2022-37454", "record": "CVE-2022-37454", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-10-21T06:15:00Z", "date_only": false, "value": "2022-10-21T06:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github", "record": "ghsa-6w4m-2xhg-2658", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-04-26T17:39:58Z", "date_only": false, "value": "2023-04-26T17:39:58Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-6w4m-2xhg-2658", "field": "published"}, {"timestamp": "2023-04-26T17:39:58Z", "date_only": false, "value": "2023-04-26T17:39:58Z", "kind": "other", "label": "Updated", "source": "github", "record": "ghsa-6w4m-2xhg-2658", "field": "modified"}, {"timestamp": "2023-05-03T10:06:29.726Z", "date_only": false, "value": "2023-05-03T10:06:29.726Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2022-37454 / mitre", "record": "CVE-2022-37454", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-03T10:29:21.027Z", "date_only": false, "value": "2024-08-03T10:29:21.027Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2022-37454 / CVE", "record": "CVE-2022-37454", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-08T15:03:12.969Z", "date_only": false, "value": "2025-05-08T15:03:12.969240Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2022-37454 / CISA-ADP", "record": "CVE-2022-37454", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-05-08T15:03:28.946Z", "date_only": false, "value": "2025-05-08T15:03:28.946Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2022-37454 / CISA-ADP", "record": "CVE-2022-37454", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-08T15:24:38Z", "date_only": false, "value": "2025-05-08T15:24:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15542", "record": "GHSA-6W4M-2XHG-2658", "field": "creation_timestamp", "uuid": "76b71336-a860-4f0b-a680-5987da40b898", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-37454\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.\n\ud83d\udccf Published: 2022-10-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-08T15:03:28.946Z\n\ud83d\udd17 References:\n1. https://csrc.nist.gov/projects/hash-functions/sha-3-project\n2. https://mouha.be/sha-3-buffer-overflow/\n3. https://news.ycombinator.com/item?id=33281106\n4. https://github.com/XKCP/XKCP/security/advisories/GHSA-6w4m-2xhg-2658\n5. https://lists.debian.org/debian-lts-announce/2022/10/msg00041.html\n6. https://lists.debian.org/debian-lts-announce/2022/11/msg00000.html\n7. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMIEXLMTW5GO36HTFFWIPB3OHZXCT3G4/\n8. https://www.debian.org/security/2022/dsa-5267\n9. https://www.debian.org/security/2022/dsa-5269\n10. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3ALQ6BDDPX5HU5YBQOBMDVAA2TSGDKIJ/\n11. https://eprint.iacr.org/2023/331\n12. https://news.ycombinator.com/item?id=35050307\n13. https://security.gentoo.org/glsa/202305-02", "url": "https://t.me/DarkWebInformer_CVEAlerts/15542"}, {"timestamp": "2026-06-29T11:50:42.592Z", "date_only": false, "value": "2026-06-29T11:50:42.592721Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-504", "record": "PYSEC-2026-504", "field": "published"}, {"timestamp": "2026-07-01T20:23:03.122Z", "date_only": false, "value": "2026-07-01T20:23:03.122139Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-504", "record": "PYSEC-2026-504", "field": "modified"}, {"timestamp": "2026-10-14T17:30:50.581Z", "date_only": false, "value": "2026-10-14T17:30:50.581Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2022-37454", "record": "CVE-2022-37454", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T17:30:50.581Z", "date_only": false, "value": "2026-10-14T17:30:50.581Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2022-37454 / siemens-SADP", "record": "CVE-2022-37454", "field": "containers.adp.2.providerMetadata.dateUpdated"}]}