https://vulnerability.circl.lu/sightings/feed 2026-06-30T10:27:14.727749+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/ba2a6f92-f3c9-4c59-9770-51d201613954/export 2026-06-30T10:27:14.748003+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "ba2a6f92-f3c9-4c59-9770-51d201613954", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-49359", "type": "published-proof-of-concept", "source": "https://github.com/pontedilana/php-weasyprint/security/advisories/GHSA-x8g9-h984-pc36", "content": "", "creation_timestamp": "2026-06-27T00:35:49.647749Z"} 2026-06-27T00:35:49.647749+00:00 https://vulnerability.circl.lu/sighting/2eb81710-ac68-4037-8a30-b81756d2f9cd/export 2026-06-30T10:27:14.749997+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "2eb81710-ac68-4037-8a30-b81756d2f9cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49359", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mp7ykmyves2b", "content": "A PDF feature can be turned into a window into your servers.\n\nphp-weasyprint (1.2M+ installs) fetched attacker-controlled URLs server-side. Cloud metadata and local files were both in reach.\n\nRun it? Upgrade to 2.6.0. (CVE-2026-49359)", "creation_timestamp": "2026-06-26T22:28:37.797194Z"} 2026-06-26T22:28:37.797194+00:00