{"metadata": {"vulnerability": "CVE-2025-46415", "count": 24, "kinds": {"milestone": 6, "sighting": 4, "kev": 0, "other": 14}}, "data": [{"timestamp": "2025-04-24T00:00:00Z", "date_only": false, "value": "2025-04-24T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-46415", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-06-24T16:04:16.457Z", "date_only": false, "value": "2025-06-24T16:04:16.457947Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lsehxijmf62s", "record": "CVE-2025-46415", "field": "creation_timestamp", "uuid": "4230cdc4-fa5a-4560-a886-447b9b4a867b", "url": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lsehxijmf62s"}, {"timestamp": "2025-06-24T16:39:35.451Z", "date_only": false, "value": "2025-06-24T16:39:35.451706Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lsejwnahuu27", "record": "CVE-2025-46415", "field": "creation_timestamp", "uuid": "59851835-361e-47ba-be89-ca55584750fd", "url": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lsejwnahuu27"}, {"timestamp": "2025-06-27T00:00:00Z", "date_only": false, "value": "2025-06-27T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-46415", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-06-27T13:23:22.298Z", "date_only": false, "value": "2025-06-27T13:23:22.298Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2025-46415", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-27T14:15:00Z", "date_only": false, "value": "2025-06-27T14:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2025-46415", "record": "UBUNTU-CVE-2025-46415", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-06-27T14:15:37Z", "date_only": false, "value": "2025-06-27T14:15:37Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-R756-7C6V-6JH7", "record": "GHSA-R756-7C6V-6JH7", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-06-27T14:15:37.870Z", "date_only": false, "value": "2025-06-27T14:15:37.870", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-46415", "record": "FKIE_CVE-2025-46415", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-06-27T15:31:24Z", "date_only": false, "value": "2025-06-27T15:31:24Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-R756-7C6V-6JH7", "record": "GHSA-R756-7C6V-6JH7", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-06-27T15:31:24Z", "date_only": false, "value": "2025-06-27T15:31:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-R756-7C6V-6JH7", "record": "GHSA-R756-7C6V-6JH7", "field": "modified"}, {"timestamp": "2025-06-27T19:57:42.327Z", "date_only": false, "value": "2025-06-27T19:57:42.327675Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-46415", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-06-27T19:57:42.327Z", "date_only": false, "value": "2025-06-27T19:57:42.327675Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-46415", "record": "FKIE_CVE-2025-46415", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-06-27T19:57:56.693Z", "date_only": false, "value": "2025-06-27T19:57:56.693Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-46415", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-06-27T19:57:56.693Z", "date_only": false, "value": "2025-06-27T19:57:56.693Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-46415", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-27T20:52:34Z", "date_only": false, "value": "2025-06-27T20:52:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19788", "record": "CVE-2025-46415", "field": "creation_timestamp", "uuid": "7f182bfa-c945-4ffb-9559-2a72a394dab2", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46415\n\ud83d\udd25 CVSS Score: 3.2 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L)\n\ud83d\udd39 Description: A race condition in the Nix, Lix, and Guix package managers allows the removal of content from arbitrary folders. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before 1.4.0-38.0e79d5b.\n\ud83d\udccf Published: 2025-06-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-27T19:57:56.693Z\n\ud83d\udd17 References:\n1. https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017\n2. https://lix.systems/blog/2025-06-24-lix-cves/\n3. https://guix.gnu.org/en/blog/2025/privilege-escalation-vulnerabilities-2025/\n4. https://labs.snyk.io\n5. https://security.snyk.io/vuln/?search=CVE-2025-46415\n6. https://security-tracker.debian.org/tracker/CVE-2025-46415", "url": "https://t.me/DarkWebInformer_CVEAlerts/19788"}, {"timestamp": "2025-07-03T00:00:00Z", "date_only": false, "value": "2025-07-03T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15248-1", "record": "OPENSUSE-SU-2025:15248-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-07-03T00:00:00Z", "date_only": false, "value": "2025-07-03T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15248-1", "record": "OPENSUSE-SU-2025:15248-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-07-03T00:00:00Z", "date_only": false, "value": "2025-07-03T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15248-1", "record": "OPENSUSE-SU-2025:15248-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-07-03T00:00:00Z", "date_only": false, "value": "2025-07-03T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15248-1", "record": "OPENSUSE-SU-2025:15248-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-02-19T12:32:39Z", "date_only": false, "value": "2026-02-19T12:32:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ToRyVand/97f09514202eb6a3c61c0ffe4bddc65b", "record": "CVE-2025-46415", "field": "creation_timestamp", "uuid": "1f2adc07-9ca0-4797-b70f-7e1579c3f534", "url": "https://gist.github.com/ToRyVand/97f09514202eb6a3c61c0ffe4bddc65b"}, {"timestamp": "2026-06-17T09:26:22.213Z", "date_only": false, "value": "2026-06-17T09:26:22.213", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-46415", "record": "FKIE_CVE-2025-46415", "field": "lastModified"}, {"timestamp": "2026-09-16T17:16:03Z", "date_only": false, "value": "2026-09-16T17:16:03Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2025-46415", "record": "UBUNTU-CVE-2025-46415", "field": "modified"}, {"timestamp": "2026-09-20T21:36:08Z", "date_only": false, "value": "2026-09-20T21:36:08Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15248-1", "record": "OPENSUSE-SU-2025:15248-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:36:08Z", "date_only": false, "value": "2026-09-20T21:36:08Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15248-1", "record": "OPENSUSE-SU-2025:15248-1", "field": "document.tracking.current_release_date"}], "metrics": {"as_of": "2026-10-31T23:17:01.610Z", "anchors": {"origin": {"timestamp": "2025-06-27T00:00:00Z", "date_only": false, "value": "2025-06-27T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-46415", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-06-27T00:00:00Z", "date_only": false, "value": "2025-06-27T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-46415", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 42506221.610154, "hours": 11807.283780598334, "days": 491.9701575249306, "min_seconds": 42419821.610154, "max_seconds": 42506221.610154, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-06-27T00:00:00Z", "date_only": false, "value": "2025-06-27T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-46415", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-31T23:17:01.610Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}