{"metadata": {"vulnerability": "ghsa-xj6r-2jpm-qvxp", "count": 9, "kinds": {"milestone": 3, "sighting": 1, "kev": 0, "other": 5}}, "data": [{"timestamp": "2021-07-29T00:00:00Z", "date_only": false, "value": "2021-07-29T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2021-37694", "record": "CVE-2021-37694", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-08-11T17:25:09Z", "date_only": false, "value": "2021-08-11T17:25:09.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2021-37694", "record": "CVE-2021-37694", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-08-11T17:25:09Z", "date_only": false, "value": "2021-08-11T17:25:09.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2021-37694 / GitHub_M", "record": "CVE-2021-37694", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-08-11T18:15:00Z", "date_only": false, "value": "2021-08-11T18:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github", "record": "ghsa-xj6r-2jpm-qvxp", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-08-11T22:38:40Z", "date_only": false, "value": "2021-08-11T22:38:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cibsecurity/27185", "record": "GHSA-XJ6R-2JPM-QVXP", "field": "creation_timestamp", "uuid": "6040a559-d316-4762-b35e-fb0e44b49826", "content": "\u203c CVE-2021-37694 \u203c\n\n@asyncapi/java-spring-cloud-stream-template generates a Spring Cloud Stream (SCSt) microservice. In versions prior to 0.7.0 arbitrary code injection was possible when an attacker controls the AsyncAPI document. An example is provided in GHSA-xj6r-2jpm-qvxp. There are no mitigations available and all users are advised to update.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/27185"}, {"timestamp": "2021-08-24T18:50:59Z", "date_only": false, "value": "2021-08-24T18:50:59Z", "kind": "other", "label": "Updated", "source": "github", "record": "ghsa-xj6r-2jpm-qvxp", "field": "modified"}, {"timestamp": "2021-08-25T14:45:52Z", "date_only": false, "value": "2021-08-25T14:45:52Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-xj6r-2jpm-qvxp", "field": "published"}, {"timestamp": "2024-08-04T01:23:01.532Z", "date_only": false, "value": "2024-08-04T01:23:01.532Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2021-37694", "record": "CVE-2021-37694", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T01:23:01.532Z", "date_only": false, "value": "2024-08-04T01:23:01.532Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2021-37694 / CVE", "record": "CVE-2021-37694", "field": "containers.adp.0.providerMetadata.dateUpdated"}]}