{"metadata": {"vulnerability": "ghsa-fj3m-2r8f-m4x9", "count": 13, "kinds": {"milestone": 3, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2023-09-06T17:40:06.142Z", "date_only": false, "value": "2023-09-06T17:40:06.142Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2023-41991", "record": "CVE-2023-41991", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-09-21T18:23:48.974Z", "date_only": false, "value": "2023-09-21T18:23:48.974Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2023-41991", "record": "CVE-2023-41991", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-09-21T19:15:11Z", "date_only": false, "value": "2023-09-21T19:15:11Z", "kind": "other", "label": "Nvd published at", "source": "github", "record": "ghsa-fj3m-2r8f-m4x9", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-09-21T21:31:00Z", "date_only": false, "value": "2023-09-21T21:31:00Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-fj3m-2r8f-m4x9", "field": "published"}, {"timestamp": "2023-09-25T00:00:00Z", "date_only": true, "value": "2023-09-25", "kind": "other", "label": "Catalog added", "source": "cvelistv5 \u00b7 CVE-2023-41991 / CISA-ADP", "record": "CVE-2023-41991", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2023-09-25T00:00:00Z", "date_only": false, "value": "2023-09-25T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 \u00b7 CVE-2023-41991 / CISA-ADP", "record": "CVE-2023-41991", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2023-12-29T12:23:29Z", "date_only": false, "value": "2023-12-29T12:23:29.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/arpsyndicate/2248", "record": "GHSA-FJ3M-2R8F-M4X9", "field": "creation_timestamp", "uuid": "8ac1d919-a935-46ed-aa47-cac8452bf93c", "content": "#ExploitObserverAlert\n\nGHSA-fj3m-2r8f-m4x9\n\nDESCRIPTION: Exploit Observer has 6 entries related to GHSA-FJ3M-2R8F-M4X9. A certificate validation issue was addressed. This issue is fixed in iOS 16.7 and iPadOS 16.7, OS 17.0.1 and iPadOS 17.0.1, watchOS 9.6.3, macOS Ventura 13.6, watchOS 10.0.1. A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.\n\nGHSS: 5.5", "url": "https://t.me/arpsyndicate/2248"}, {"timestamp": "2024-01-10T22:03:18.435Z", "date_only": false, "value": "2024-01-10T22:03:18.435Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-41991 / apple", "record": "CVE-2023-41991", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-04T15:13:21.191Z", "date_only": false, "value": "2025-02-04T15:13:21.191475Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2023-41991 / CISA-ADP", "record": "CVE-2023-41991", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-10-21T23:05:37.441Z", "date_only": false, "value": "2025-10-21T23:05:37.441Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-41991 / CISA-ADP", "record": "CVE-2023-41991", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-04T19:21:39.550Z", "date_only": false, "value": "2025-11-04T19:21:39.550Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-41991", "record": "CVE-2023-41991", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-11-04T19:21:39.550Z", "date_only": false, "value": "2025-11-04T19:21:39.550Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-41991 / CVE", "record": "CVE-2023-41991", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-04T21:30:39Z", "date_only": false, "value": "2025-11-04T21:30:39Z", "kind": "other", "label": "Updated", "source": "github", "record": "ghsa-fj3m-2r8f-m4x9", "field": "modified"}]}
