{"metadata": {"vulnerability": "CVE-2025-27154", "count": 29, "kinds": {"milestone": 7, "sighting": 7, "kev": 0, "other": 15}}, "data": [{"timestamp": "2025-02-19T16:30:47.780Z", "date_only": false, "value": "2025-02-19T16:30:47.780Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-27154", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-02-27T07:24:18Z", "date_only": false, "value": "2025-02-27T07:24:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/spotipy-dev/spotipy/security/advisories/GHSA-pwhh-q4h6-w599", "record": "CVE-2025-27154", "field": "creation_timestamp", "uuid": "25efa23b-db81-4b88-9b54-7bd3e0f45f4d", "url": "https://github.com/spotipy-dev/spotipy/security/advisories/GHSA-pwhh-q4h6-w599"}, {"timestamp": "2025-02-27T13:53:54.161Z", "date_only": false, "value": "2025-02-27T13:53:54.161Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-27154", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-02-27T13:53:54.161Z", "date_only": false, "value": "2025-02-27T13:53:54.161Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2025-27154", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-27T14:15:00Z", "date_only": false, "value": "2025-02-27T14:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2025-27154", "record": "UBUNTU-CVE-2025-27154", "field": "published"}, {"timestamp": "2025-02-27T14:15:36Z", "date_only": false, "value": "2025-02-27T14:15:36Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PWHH-Q4H6-W599", "record": "GHSA-PWHH-Q4H6-W599", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-02-27T14:15:36.180Z", "date_only": false, "value": "2025-02-27T14:15:36.180", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-27154", "record": "FKIE_CVE-2025-27154", "field": "published"}, {"timestamp": "2025-02-27T14:29:34.168Z", "date_only": false, "value": "2025-02-27T14:29:34.168048Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-27154", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-27T14:29:34.168Z", "date_only": false, "value": "2025-02-27T14:29:34.168048Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-27154", "record": "FKIE_CVE-2025-27154", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-27T14:29:50.364Z", "date_only": false, "value": "2025-02-27T14:29:50.364Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-27154", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-27T14:29:50.364Z", "date_only": false, "value": "2025-02-27T14:29:50.364Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-27154", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-27T15:30:14Z", "date_only": false, "value": "2025-02-27T15:30:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/18aGabcqT47rhbAtmBCfjbslvF7WShvEcg6GVkQNwRNaIHA", "record": "CVE-2025-27154", "field": "creation_timestamp", "uuid": "d2a8bf97-b5ee-4a8e-84e5-6136d5af3946"}, {"timestamp": "2025-02-27T16:45:04Z", "date_only": false, "value": "2025-02-27T16:45:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/19039", "record": "CVE-2025-27154", "field": "creation_timestamp", "uuid": "de91f0d1-6d5f-498f-8fec-132b615474c3", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27154 - Spotify Cache File Permission Weakness\", \n  \"Content\": \"CVE ID : CVE-2025-27154 \nPublished : Feb. 27, 2025, 2:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : Spotipy is a lightweight Python library for the Spotify Web API. The `CacheHandler` class creates a cache file to store the auth token. Prior to version 2.25.1, the file created has `rw-r--r--` (644) permissions by default, when it could be locked down to `rw-------` (600) permissions. This leads to overly broad exposure of the spotify auth token. If this token can be read by an attacker (another user on the machine, or a process running as another user), it can be used to perform administrative actions on the Spotify account, depending on the scope granted to the token. Version 2.25.1 tightens the cache file permissions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/19039"}, {"timestamp": "2025-02-28T00:00:00Z", "date_only": false, "value": "2025-02-28T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14847-1", "record": "OPENSUSE-SU-2025:14847-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-02-28T00:00:00Z", "date_only": false, "value": "2025-02-28T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14847-1", "record": "OPENSUSE-SU-2025:14847-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-02-28T00:00:00Z", "date_only": false, "value": "2025-02-28T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14847-1", "record": "OPENSUSE-SU-2025:14847-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-02-28T00:00:00Z", "date_only": false, "value": "2025-02-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14847-1", "record": "OPENSUSE-SU-2025:14847-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-02-28T02:34:38Z", "date_only": false, "value": "2025-02-28T02:34:38Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PWHH-Q4H6-W599", "record": "GHSA-PWHH-Q4H6-W599", "field": "published"}, {"timestamp": "2025-02-28T02:34:39Z", "date_only": false, "value": "2025-02-28T02:34:39Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PWHH-Q4H6-W599", "record": "GHSA-PWHH-Q4H6-W599", "field": "modified"}, {"timestamp": "2025-03-03T05:33:47.188Z", "date_only": false, "value": "2025-03-03T05:33:47.188266Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3ljha22fzp22y", "record": "cve-2025-27154", "field": "creation_timestamp", "uuid": "018dfcfe-74f3-4bd5-bdcf-c9610535b747", "url": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3ljha22fzp22y"}, {"timestamp": "2025-03-03T08:53:29.876Z", "date_only": false, "value": "2025-03-03T08:53:29.876543Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3ljhl73lbuc23", "record": "CVE-2025-27154", "field": "creation_timestamp", "uuid": "006a426f-d29c-4efc-a5ec-4782b6b9c3ae", "url": "https://bsky.app/profile/dinosn.bsky.social/post/3ljhl73lbuc23"}, {"timestamp": "2025-03-03T10:10:46.706Z", "date_only": false, "value": "2025-03-03T10:10:46.706302Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ljhpje5kwt2u", "record": "CVE-2025-27154", "field": "creation_timestamp", "uuid": "9fa085c3-14d9-4346-91df-cd9c945d37b2", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ljhpje5kwt2u"}, {"timestamp": "2025-03-17T16:30:15.206Z", "date_only": false, "value": "2025-03-17T16:30:15.206095Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lkllaqz3bu2t", "record": "CVE-2025-27154", "field": "creation_timestamp", "uuid": "57f3cd56-7614-4b6b-be0f-3c7a552fa31f", "url": "https://bsky.app/profile/bolhasec.com/post/3lkllaqz3bu2t"}, {"timestamp": "2026-05-20T15:17:31Z", "date_only": false, "value": "2026-05-20T15:17:31Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2025-27154", "record": "UBUNTU-CVE-2025-27154", "field": "modified"}, {"timestamp": "2026-06-17T09:03:06.787Z", "date_only": false, "value": "2026-06-17T09:03:06.787", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-27154", "record": "FKIE_CVE-2025-27154", "field": "lastModified"}, {"timestamp": "2026-07-07T14:34:50.322Z", "date_only": false, "value": "2026-07-07T14:34:50.322883Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-1936", "record": "PYSEC-2026-1936", "field": "published"}, {"timestamp": "2026-07-07T17:25:25.392Z", "date_only": false, "value": "2026-07-07T17:25:25.392089Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-1936", "record": "PYSEC-2026-1936", "field": "modified"}, {"timestamp": "2026-09-20T21:28:25Z", "date_only": false, "value": "2026-09-20T21:28:25Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14847-1", "record": "OPENSUSE-SU-2025:14847-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:28:25Z", "date_only": false, "value": "2026-09-20T21:28:25Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14847-1", "record": "OPENSUSE-SU-2025:14847-1", "field": "document.tracking.current_release_date"}]}