https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 14 Jul 2026 05:48:24 +0000 https://vulnerability.circl.lu/sighting/3187691d-181f-46fd-b268-44d16c1afd13/export {"uuid": "3187691d-181f-46fd-b268-44d16c1afd13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29776", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7692", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29776\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L)\n\ud83d\udd39 Description: Azle is a WebAssembly runtime for TypeScript and JavaScript on ICP. Calling `setTimer` in Azle versions `0.27.0`, `0.28.0`, and `0.29.0` causes an immediate infinite loop of timers to be executed on the canister, each timer attempting to clean up the global state of the previous timer. The infinite loop will occur with any valid invocation of `setTimer`. The problem has been fixed as of Azle version `0.30.0`. As a workaround, if a canister is caught in this infinite loop after calling `setTimer`, the canister can be upgraded and the timers will all be cleared, thus ending the loop.\n\ud83d\udccf Published: 2025-03-14T13:13:27.137Z\n\ud83d\udccf Modified: 2025-03-15T20:49:42.369Z\n\ud83d\udd17 References:\n1. https://github.com/demergent-labs/azle/security/advisories/GHSA-xc76-5pf9-mx8m\n2. https://github.com/demergent-labs/azle/releases/tag/0.30.0", "creation_timestamp": "2025-03-15T21:45:46.000000Z"} {"uuid": "3187691d-181f-46fd-b268-44d16c1afd13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29776", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7692", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29776\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L)\n\ud83d\udd39 Description: Azle is a WebAssembly runtime for TypeScript and JavaScript on ICP. Calling `setTimer` in Azle versions `0.27.0`, `0.28.0`, and `0.29.0` causes an immediate infinite loop of timers to be executed on the canister, each timer attempting to clean up the global state of the previous timer. The infinite loop will occur with any valid invocation of `setTimer`. The problem has been fixed as of Azle version `0.30.0`. As a workaround, if a canister is caught in this infinite loop after calling `setTimer`, the canister can be upgraded and the timers will all be cleared, thus ending the loop.\n\ud83d\udccf Published: 2025-03-14T13:13:27.137Z\n\ud83d\udccf Modified: 2025-03-15T20:49:42.369Z\n\ud83d\udd17 References:\n1. https://github.com/demergent-labs/azle/security/advisories/GHSA-xc76-5pf9-mx8m\n2. https://github.com/demergent-labs/azle/releases/tag/0.30.0", "creation_timestamp": "2025-03-15T21:45:46.000000Z"} https://vulnerability.circl.lu/sighting/3187691d-181f-46fd-b268-44d16c1afd13/export Sat, 15 Mar 2025 21:45:46 +0000 https://vulnerability.circl.lu/sighting/a18b986a-5168-4605-b51f-ed49424cddad/export {"uuid": "a18b986a-5168-4605-b51f-ed49424cddad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29776", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lke2qhgz2f2m", "content": "", "creation_timestamp": "2025-03-14T16:46:17.051775Z"} {"uuid": "a18b986a-5168-4605-b51f-ed49424cddad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29776", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lke2qhgz2f2m", "content": "", "creation_timestamp": "2025-03-14T16:46:17.051775Z"} https://vulnerability.circl.lu/sighting/a18b986a-5168-4605-b51f-ed49424cddad/export Fri, 14 Mar 2025 16:46:17 +0000 https://vulnerability.circl.lu/sighting/226e9edf-387b-46b6-9aff-0b784f5a21fb/export {"uuid": "226e9edf-387b-46b6-9aff-0b784f5a21fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29776", "type": "seen", "source": "https://t.me/cvedetector/20301", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-29776 - Azle WebAssembly Runtime Timer Infinite Loop Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-29776 \nPublished : March 14, 2025, 2:15 p.m. | 1\u00a0hour, 15\u00a0minutes ago \nDescription : Azle is a WebAssembly runtime for TypeScript and JavaScript on ICP. Calling `setTimer` in Azle versions `0.27.0`, `0.28.0`, and `0.29.0` causes an immediate infinite loop of timers to be executed on the canister, each timer attempting to clean up the global state of the previous timer. The infinite loop will occur with any valid invocation of `setTimer`. The problem has been fixed as of Azle version `0.30.0`. As a workaround, if a canister is caught in this infinite loop after calling `setTimer`, the canister can be upgraded and the timers will all be cleared, thus ending the loop. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"14 Mar 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T16:42:35.000000Z"} {"uuid": "226e9edf-387b-46b6-9aff-0b784f5a21fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29776", "type": "seen", "source": "https://t.me/cvedetector/20301", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-29776 - Azle WebAssembly Runtime Timer Infinite Loop Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-29776 \nPublished : March 14, 2025, 2:15 p.m. | 1\u00a0hour, 15\u00a0minutes ago \nDescription : Azle is a WebAssembly runtime for TypeScript and JavaScript on ICP. Calling `setTimer` in Azle versions `0.27.0`, `0.28.0`, and `0.29.0` causes an immediate infinite loop of timers to be executed on the canister, each timer attempting to clean up the global state of the previous timer. The infinite loop will occur with any valid invocation of `setTimer`. The problem has been fixed as of Azle version `0.30.0`. As a workaround, if a canister is caught in this infinite loop after calling `setTimer`, the canister can be upgraded and the timers will all be cleared, thus ending the loop. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"14 Mar 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T16:42:35.000000Z"} https://vulnerability.circl.lu/sighting/226e9edf-387b-46b6-9aff-0b784f5a21fb/export Fri, 14 Mar 2025 16:42:35 +0000 https://vulnerability.circl.lu/sighting/0c5abd91-e959-44c0-a4d9-31b8a309caf7/export {"uuid": "0c5abd91-e959-44c0-a4d9-31b8a309caf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29776", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lkdrzgfcqb2i", "content": "", "creation_timestamp": "2025-03-14T14:10:07.186785Z"} {"uuid": "0c5abd91-e959-44c0-a4d9-31b8a309caf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29776", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lkdrzgfcqb2i", "content": "", "creation_timestamp": "2025-03-14T14:10:07.186785Z"} https://vulnerability.circl.lu/sighting/0c5abd91-e959-44c0-a4d9-31b8a309caf7/export Fri, 14 Mar 2025 14:10:07 +0000