{"metadata": {"vulnerability": "ghsa-9q7c-qmhm-jv86", "count": 10, "kinds": {"milestone": 3, "sighting": 1, "kev": 0, "other": 6}}, "data": [{"timestamp": "2025-06-20T17:42:25.709Z", "date_only": false, "value": "2025-06-20T17:42:25.709Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2025-52889", "record": "CVE-2025-52889", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-06-25T16:49:00.442Z", "date_only": false, "value": "2025-06-25T16:49:00.442Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2025-52889", "record": "CVE-2025-52889", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-06-25T16:49:00.442Z", "date_only": false, "value": "2025-06-25T16:49:00.442Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-52889 / GitHub_M", "record": "CVE-2025-52889", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-25T17:15:39Z", "date_only": false, "value": "2025-06-25T17:15:39Z", "kind": "other", "label": "Nvd published at", "source": "github", "record": "ghsa-9q7c-qmhm-jv86", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-06-25T17:54:25.947Z", "date_only": false, "value": "2025-06-25T17:54:25.947049Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2025-52889 / CISA-ADP", "record": "CVE-2025-52889", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-06-25T17:54:29.213Z", "date_only": false, "value": "2025-06-25T17:54:29.213Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-52889", "record": "CVE-2025-52889", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-06-25T17:54:29.213Z", "date_only": false, "value": "2025-06-25T17:54:29.213Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-52889 / CISA-ADP", "record": "CVE-2025-52889", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-25T18:06:29Z", "date_only": false, "value": "2025-06-25T18:06:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19498", "record": "GHSA-9Q7C-QMHM-JV86", "field": "creation_timestamp", "uuid": "ffc47876-be9a-4944-b61c-80a56d703e0a", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-52889\n\ud83d\udd25 CVSS Score: 3.4 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L)\n\ud83d\udd39 Description: Incus is a system container and virtual machine manager. When using an ACL on a device connected to a bridge, Incus version 6.12 and 6.13 generates nftables rules for local services (DHCP, DNS...) that partially bypass security options `security.mac_filtering`, `security.ipv4_filtering` and `security.ipv6_filtering`. This can lead to DHCP pool exhaustion and opens the door for other attacks. A patch is available at commit 2516fb19ad8428454cb4edfe70c0a5f0dc1da214.\n\ud83d\udccf Published: 2025-06-25T16:49:00.442Z\n\ud83d\udccf Modified: 2025-06-25T16:49:00.442Z\n\ud83d\udd17 References:\n1. https://github.com/lxc/incus/security/advisories/GHSA-9q7c-qmhm-jv86\n2. https://github.com/lxc/incus/commit/2516fb19ad8428454cb4edfe70c0a5f0dc1da214\n3. https://github.com/lxc/incus/commit/a7c33301738aede3c035063e973b1d885d9bac7c", "url": "https://t.me/DarkWebInformer_CVEAlerts/19498"}, {"timestamp": "2025-06-26T21:11:09Z", "date_only": false, "value": "2025-06-26T21:11:09Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-9q7c-qmhm-jv86", "field": "published"}, {"timestamp": "2026-03-30T13:54:35Z", "date_only": false, "value": "2026-03-30T13:54:35Z", "kind": "other", "label": "Updated", "source": "github", "record": "ghsa-9q7c-qmhm-jv86", "field": "modified"}]}