<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-28T04:24:47.414845+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4cbfc5bf-0d7d-484b-b34c-116ab8e4d880/export</id>
    <title>4cbfc5bf-0d7d-484b-b34c-116ab8e4d880</title>
    <updated>2026-05-28T04:24:47.831392+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4cbfc5bf-0d7d-484b-b34c-116ab8e4d880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40478", "type": "published-proof-of-concept", "source": "Telegram/tNtN6ajST1i0h_Z4W2szdcVpxF1Em9wIkkVyc-W9Ntpka1A", "content": "", "creation_timestamp": "2026-04-17T23:20:34.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4cbfc5bf-0d7d-484b-b34c-116ab8e4d880/export"/>
    <published>2026-04-17T23:20:34+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/878b6eac-2386-419c-bc0e-fc592df58d08/export</id>
    <title>878b6eac-2386-419c-bc0e-fc592df58d08</title>
    <updated>2026-05-28T04:24:47.831293+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "878b6eac-2386-419c-bc0e-fc592df58d08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40478", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjq4jah7bm26", "content": "", "creation_timestamp": "2026-04-17T23:50:51.624485Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/878b6eac-2386-419c-bc0e-fc592df58d08/export"/>
    <published>2026-04-17T23:50:51.624485+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3cce2cdc-6387-4d36-9ab2-0e434ecd63c7/export</id>
    <title>3cce2cdc-6387-4d36-9ab2-0e434ecd63c7</title>
    <updated>2026-05-28T04:24:47.831196+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3cce2cdc-6387-4d36-9ab2-0e434ecd63c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40478", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkeoktpjsf2p", "content": "", "creation_timestamp": "2026-04-26T04:07:08.249705Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3cce2cdc-6387-4d36-9ab2-0e434ecd63c7/export"/>
    <published>2026-04-26T04:07:08.249705+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4b9e9881-5eb9-4c76-9fb3-47d697340d77/export</id>
    <title>4b9e9881-5eb9-4c76-9fb3-47d697340d77</title>
    <updated>2026-05-28T04:24:47.831087+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4b9e9881-5eb9-4c76-9fb3-47d697340d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40478", "type": "seen", "source": "https://bsky.app/profile/brianvermeer.nl/post/3mknezhgwys25", "content": "A high CVSS score does not always mean \"all hands on deck.\" It is wiser to assess the situation first before rushing into stress mode. For example, examine CVE-2026-40478 in Thymeleaf.\n\nsnyk.io/blog/thymele...", "creation_timestamp": "2026-04-29T15:10:23.346735Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4b9e9881-5eb9-4c76-9fb3-47d697340d77/export"/>
    <published>2026-04-29T15:10:23.346735+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bd55fe42-a878-44d4-a505-863439b0967c/export</id>
    <title>bd55fe42-a878-44d4-a505-863439b0967c</title>
    <updated>2026-05-28T04:24:47.830945+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bd55fe42-a878-44d4-a505-863439b0967c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40478", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mkoildefdb2g", "content": "The latest update for #Snyk includes \"'A Mini Shai-Hulud Has Appeared': Bun-Based Stealer Hits #SAP @cap-js and mbt npm Packages\" and \"Don't Panic: The Thymeleaf Template Injection That Only Hurts If You Let It (CVE-2026-40478)\".\n \n#CyberSecurity #DevOps #OpenSource https://opsmtrs.com/3yzKsZo", "creation_timestamp": "2026-04-30T01:46:38.614063Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bd55fe42-a878-44d4-a505-863439b0967c/export"/>
    <published>2026-04-30T01:46:38.614063+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a1c1da05-1389-4cb8-beb1-b377e9d26dae/export</id>
    <title>a1c1da05-1389-4cb8-beb1-b377e9d26dae</title>
    <updated>2026-05-28T04:24:47.828536+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a1c1da05-1389-4cb8-beb1-b377e9d26dae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40478", "type": "seen", "source": "https://bsky.app/profile/foojay.io/post/3mm4iszh7u224", "content": "New post from @brianvermeer.nl on Foojay: A practical look at the Thymeleaf template injection vulnerability (CVE-2026-40478) and why understanding the context matters more than the panic.\n\nfoojay.io/today/dont-p...\n\n#Java #Security #Thymeleaf", "creation_timestamp": "2026-05-18T08:53:27.990287Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a1c1da05-1389-4cb8-beb1-b377e9d26dae/export"/>
    <published>2026-05-18T08:53:27.990287+00:00</published>
  </entry>
</feed>
