{"metadata": {"vulnerability": "cve-2025-25289", "count": 21, "kinds": {"milestone": 7, "sighting": 5, "kev": 0, "other": 9}}, "data": [{"timestamp": "2025-02-06T17:13:33.122Z", "date_only": false, "value": "2025-02-06T17:13:33.122Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-25289", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-02-14T17:24:35Z", "date_only": false, "value": "2025-02-14T17:24:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/octokit/request-error.js/security/advisories/GHSA-xx4v-prfh-6cgc", "record": "CVE-2025-25289", "field": "creation_timestamp", "uuid": "da5acb86-7f12-45d0-ab89-62610c378f58", "url": "https://github.com/octokit/request-error.js/security/advisories/GHSA-xx4v-prfh-6cgc"}, {"timestamp": "2025-02-14T17:58:54Z", "date_only": false, "value": "2025-02-14T17:58:54Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XX4V-PRFH-6CGC", "record": "GHSA-XX4V-PRFH-6CGC", "field": "published"}, {"timestamp": "2025-02-14T19:35:19.998Z", "date_only": false, "value": "2025-02-14T19:35:19.998Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-25289", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-02-14T19:35:19.998Z", "date_only": false, "value": "2025-02-14T19:35:19.998Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2025-25289", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-14T19:40:19.456Z", "date_only": false, "value": "2025-02-14T19:40:19.456843Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/114003936414922745", "record": "CVE-2025-25289", "field": "creation_timestamp", "uuid": "c976062d-f67d-4acc-9c0c-1875f892be0c", "url": "https://infosec.exchange/users/cve/statuses/114003936414922745"}, {"timestamp": "2025-02-14T20:08:24.260Z", "date_only": false, "value": "2025-02-14T20:08:24.260356Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-25289", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-14T20:08:24.260Z", "date_only": false, "value": "2025-02-14T20:08:24.260356Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-25289", "record": "FKIE_CVE-2025-25289", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-14T20:08:32.674Z", "date_only": false, "value": "2025-02-14T20:08:32.674Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-25289", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-14T20:08:32.674Z", "date_only": false, "value": "2025-02-14T20:08:32.674Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-25289", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-14T20:15:35Z", "date_only": false, "value": "2025-02-14T20:15:35Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-XX4V-PRFH-6CGC", "record": "GHSA-XX4V-PRFH-6CGC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-02-14T20:15:35.100Z", "date_only": false, "value": "2025-02-14T20:15:35.100", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-25289", "record": "FKIE_CVE-2025-25289", "field": "published"}, {"timestamp": "2025-02-14T20:15:55.707Z", "date_only": false, "value": "2025-02-14T20:15:55.707510Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5zfsd3ay2a", "record": "CVE-2025-25289", "field": "creation_timestamp", "uuid": "6c7c85f9-e35e-496f-b910-e1e5650acd5a", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5zfsd3ay2a"}, {"timestamp": "2025-02-14T22:50:13.025Z", "date_only": false, "value": "2025-02-14T22:50:13.025331Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li6bzn2box2y", "record": "CVE-2025-25289", "field": "creation_timestamp", "uuid": "528532b1-25c7-4c83-a369-b2f0debd9dad", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3li6bzn2box2y"}, {"timestamp": "2025-02-14T23:07:29Z", "date_only": false, "value": "2025-02-14T23:07:29Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-XX4V-PRFH-6CGC", "record": "GHSA-XX4V-PRFH-6CGC", "field": "modified"}, {"timestamp": "2025-02-15T00:08:42Z", "date_only": false, "value": "2025-02-15T00:08:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/18143", "record": "CVE-2025-25289", "field": "creation_timestamp", "uuid": "920d2d52-6653-4d76-94ca-4b9d4ad18a91", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25289 - Octokit Regular Expression Denial of Service (ReDoS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25289 \nPublished : Feb. 14, 2025, 8:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : @octokit/request-error is an error class for Octokit request errors. Starting in version 1.0.0 and prior to version 6.1.7, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the processing of HTTP request headers. By sending an authorization header containing an excessively long sequence of spaces followed by a newline and \"@\", an attacker can exploit inefficient regular expression processing, leading to excessive resource consumption. This can significantly degrade server performance or cause a denial-of-service (DoS) condition, impacting availability. Version 6.1.7 contains a fix for the issue. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/18143"}, {"timestamp": "2025-03-28T00:00:00Z", "date_only": true, "value": "2025-03-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0279", "record": "CERTFR-2025-AVI-0279", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2025-04-01T00:00:00Z", "date_only": true, "value": "2025-04-01", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0279", "record": "CERTFR-2025-AVI-0279", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2025-04-03T00:00:00Z", "date_only": true, "value": "2025-04-03", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0279", "record": "CERTFR-2025-AVI-0279", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0279", "record": "CERTFR-2025-AVI-0279", "field": "revisions.0.revision_date"}, {"timestamp": "2026-06-17T09:00:37.410Z", "date_only": false, "value": "2026-06-17T09:00:37.410", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-25289", "record": "FKIE_CVE-2025-25289", "field": "lastModified"}]}
