<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-18T04:28:00.123762+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d15e0b69-c7e6-4c1d-9211-1c147ab5c3ad/export</id>
    <title>d15e0b69-c7e6-4c1d-9211-1c147ab5c3ad</title>
    <updated>2026-06-18T04:28:00.489209+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d15e0b69-c7e6-4c1d-9211-1c147ab5c3ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48714", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moef7y4spa2t", "content": "\ud83d\udd34 CVE-2026-48714 - Critical (9.1)\n\ni18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fa...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48714/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T23:00:46.208193Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d15e0b69-c7e6-4c1d-9211-1c147ab5c3ad/export"/>
    <published>2026-06-15T23:00:46.208193+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a3fa14ef-00f7-4651-bffe-41b91e4e5ff5/export</id>
    <title>a3fa14ef-00f7-4651-bffe-41b91e4e5ff5</title>
    <updated>2026-06-18T04:28:00.489125+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a3fa14ef-00f7-4651-bffe-41b91e4e5ff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48714", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moekfhn56c2n", "content": "CVE-2026-48714 - i18next-http-middleware missingKeyHandler does not reject keys whose segments contain prototype-polluting names\nCVE ID : CVE-2026-48714\n \n Published : June 15, 2026, 10:16 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : i18next-http-middleware is a middleware t...", "creation_timestamp": "2026-06-16T00:33:18.297029Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a3fa14ef-00f7-4651-bffe-41b91e4e5ff5/export"/>
    <published>2026-06-16T00:33:18.297029+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d9c97fbe-de1a-41f4-92a0-a73cda53a811/export</id>
    <title>d9c97fbe-de1a-41f4-92a0-a73cda53a811</title>
    <updated>2026-06-18T04:28:00.489015+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d9c97fbe-de1a-41f4-92a0-a73cda53a811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48714", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3moenlnrkc727", "content": "CRITICAL: i18next-http-middleware &amp;lt;3.9.7 has a prototype pollution flaw in missingKeyHandler. Risk: app crashes, config poisoning. Upgrade to 3.9.7 or restrict handler access now! https://radar.offseq.com/threat/cve-2026-48714-cwe-1321-improperly-controlled-modi-f43de94a #OffSeq #CVE202648714 #No...", "creation_timestamp": "2026-06-16T01:30:27.854431Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d9c97fbe-de1a-41f4-92a0-a73cda53a811/export"/>
    <published>2026-06-16T01:30:27.854431+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5d895ccb-74fb-483e-bb4b-47e46abbd167/export</id>
    <title>5d895ccb-74fb-483e-bb4b-47e46abbd167</title>
    <updated>2026-06-18T04:28:00.486543+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5d895ccb-74fb-483e-bb4b-47e46abbd167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48714", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116757195997316515", "content": "\ud83d\udea8 CRITICAL: CVE-2026-48714 in i18next-http-middleware (&amp;lt;3.9.7) enables remote prototype pollution via missingKeyHandler. Impacts: app crashes, translation corruption, config poisoning. Upgrade to 3.9.7 or apply mitigations! https://radar.offseq.com/threat/cve-2026-48714-cwe-1321-improperly-controlled-modi-f43de94a #OffSeq #CVE202648714 #infosec", "creation_timestamp": "2026-06-16T01:30:28.233698Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5d895ccb-74fb-483e-bb4b-47e46abbd167/export"/>
    <published>2026-06-16T01:30:28.233698+00:00</published>
  </entry>
</feed>
