{"metadata": {"vulnerability": "ghsa-pj3v-9cm8-gvj8", "count": 11, "kinds": {"milestone": 3, "sighting": 2, "kev": 0, "other": 6}}, "data": [{"timestamp": "2025-04-17T20:07:08.555Z", "date_only": false, "value": "2025-04-17T20:07:08.555Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2025-43855", "record": "CVE-2025-43855", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-04-24T13:58:30.536Z", "date_only": false, "value": "2025-04-24T13:58:30.536Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2025-43855", "record": "CVE-2025-43855", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-04-24T14:05:40Z", "date_only": false, "value": "2025-04-24T14:05:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13224", "record": "GHSA-PJ3V-9CM8-GVJ8", "field": "creation_timestamp", "uuid": "c59c6c28-972c-4245-963f-f390996f635a", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-43855\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: tRPC allows users to build & consume fully typesafe APIs without schemas or code generation. In versions starting from 11.0.0 to before 11.1.1, an unhandled error is thrown when validating invalid connectionParams which crashes a tRPC WebSocket server. This allows any unauthenticated user to crash a tRPC 11 WebSocket server. Any tRPC 11 server with WebSocket enabled with a createContext method set is vulnerable. This issue has been patched in version 11.1.1.\n\ud83d\udccf Published: 2025-04-24T13:58:30.536Z\n\ud83d\udccf Modified: 2025-04-24T13:58:30.536Z\n\ud83d\udd17 References:\n1. https://github.com/trpc/trpc/security/advisories/GHSA-pj3v-9cm8-gvj8\n2. https://github.com/trpc/trpc/commit/9beb26c636d44852e0f407f3d7a82ad54df65b4d", "url": "https://t.me/DarkWebInformer_CVEAlerts/13224"}, {"timestamp": "2025-04-24T14:14:25.436Z", "date_only": false, "value": "2025-04-24T14:14:25.436065Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2025-43855 / CISA-ADP", "record": "CVE-2025-43855", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-24T14:15:59Z", "date_only": false, "value": "2025-04-24T14:15:59Z", "kind": "other", "label": "Nvd published at", "source": "github", "record": "ghsa-pj3v-9cm8-gvj8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-04-24T14:17:26.881Z", "date_only": false, "value": "2025-04-24T14:17:26.881Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-43855 / CISA-ADP", "record": "CVE-2025-43855", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-24T14:59:58.830Z", "date_only": false, "value": "2025-04-24T14:59:58.830363Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114393533525785086", "record": "GHSA-pj3v-9cm8-gvj8", "field": "creation_timestamp", "uuid": "1d6ca51e-28ec-453f-b9b2-0812fe56a1db", "url": "https://infosec.exchange/users/cR0w/statuses/114393533525785086"}, {"timestamp": "2025-04-24T16:03:57Z", "date_only": false, "value": "2025-04-24T16:03:57Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-pj3v-9cm8-gvj8", "field": "published"}, {"timestamp": "2025-04-24T16:03:58Z", "date_only": false, "value": "2025-04-24T16:03:58Z", "kind": "other", "label": "Updated", "source": "github", "record": "ghsa-pj3v-9cm8-gvj8", "field": "modified"}, {"timestamp": "2025-05-14T20:07:29.865Z", "date_only": false, "value": "2025-05-14T20:07:29.865Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-43855", "record": "CVE-2025-43855", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-05-14T20:07:29.865Z", "date_only": false, "value": "2025-05-14T20:07:29.865Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-43855 / GitHub_M", "record": "CVE-2025-43855", "field": "containers.cna.providerMetadata.dateUpdated"}]}