https://vulnerability.circl.lu/sightings/feed 2026-09-02T23:59:16.671185+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/5be7db6b-ebb9-47b8-95a8-5e7e809a4193/export 2026-09-02T23:59:16.699685+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5be7db6b-ebb9-47b8-95a8-5e7e809a4193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73625", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3391", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 check_unsafe_options \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Python \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c\u0438 GitPython \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0438\u043d\u044f\u0442\u0438\u0435\u043c \u043c\u0435\u0440 \u043f\u043e \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435\n\nBDU:2026-11883\nCVE-2026-73625\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/gitpython-developers/GitPython/security/advisories/GHSA-r9mr-m37c-5fr3\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Red Hat Inc.:\nhttps://access.redhat.com/security/cve/cve-2026-73625", "creation_timestamp": "2026-08-20T00:00:28.129500Z"} 2026-08-20T00:00:28.129500+00:00 https://vulnerability.circl.lu/sighting/5d3aa99e-d3ec-4e50-80da-1f887e0f2609/export 2026-09-02T23:59:16.702870+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5d3aa99e-d3ec-4e50-80da-1f887e0f2609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73625", "type": "seen", "source": "https://t.me/bdufstecru/3391", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 check_unsafe_options \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Python \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c\u0438 GitPython \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0438\u043d\u044f\u0442\u0438\u0435\u043c \u043c\u0435\u0440 \u043f\u043e \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435\n\nBDU:2026-11883\nCVE-2026-73625\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/gitpython-developers/GitPython/security/advisories/GHSA-r9mr-m37c-5fr3\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Red Hat Inc.:\nhttps://access.redhat.com/security/cve/cve-2026-73625", "creation_timestamp": "2026-08-19T16:00:03.811107Z"} 2026-08-19T16:00:03.811107+00:00 https://vulnerability.circl.lu/sighting/787076ff-877c-4cef-8a65-f833318bf793/export 2026-09-02T23:59:16.703014+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "787076ff-877c-4cef-8a65-f833318bf793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73620", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3388", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0439 IndexFile.checkout() \u0438 TagReference.create() \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Python \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c\u0438 GitPython \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u0438\u043c\u0435\u043d\u0438 \u043f\u0443\u0442\u0438 \u043a \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0443 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 kwargs. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438\n\nBDU:2026-11719\nCVE-2026-73620\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3f7w-8rr8-f37f", "creation_timestamp": "2026-08-18T00:00:28.470379Z"} 2026-08-18T00:00:28.470379+00:00 https://vulnerability.circl.lu/sighting/dee807ab-2b1f-4811-bb6a-212cd69d7c9c/export 2026-09-02T23:59:16.703131+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "dee807ab-2b1f-4811-bb6a-212cd69d7c9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73620", "type": "seen", "source": "https://t.me/bdufstecru/3388", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0439 IndexFile.checkout() \u0438 TagReference.create() \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Python \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c\u0438 GitPython \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u0438\u043c\u0435\u043d\u0438 \u043f\u0443\u0442\u0438 \u043a \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0443 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 kwargs. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438\n\nBDU:2026-11719\nCVE-2026-73620\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3f7w-8rr8-f37f", "creation_timestamp": "2026-08-17T15:00:04.120896Z"} 2026-08-17T15:00:04.120896+00:00 https://vulnerability.circl.lu/sighting/f15b260b-9e1f-4411-92c0-0d390b22fc33/export 2026-09-02T23:59:16.703236+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f15b260b-9e1f-4411-92c0-0d390b22fc33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73625", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt4qnvwf5g2f", "content": "CVE-2026-73625 - gitpython\nA vulnerability in GitPython allows attackers to execute arbitrary commands on the host system. This can happen when using certain Git methods in GitPython, such as cloning or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gitpython #pip #CVE #infosec", "creation_timestamp": "2026-08-15T13:10:04.798643Z"} 2026-08-15T13:10:04.798643+00:00 https://vulnerability.circl.lu/sighting/95510133-39dd-4e76-9d9d-474ee49f617b/export 2026-09-02T23:59:16.703338+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "95510133-39dd-4e76-9d9d-474ee49f617b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73627", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gbjwpcjowhhrk", "content": "CVE-2026-73627 - JupyterLab 4.6.0 Plugin Manager Lock-Rule Enforcement Bypass\nCVE ID : CVE-2026-73627\n \n Published : Aug. 13, 2026, 12:17 p.m. | 17\u00a0minutes ago\n \n Description : JupyterLab (pip package 'jupyterlab') versions >=4.1.0,<=4.5.9 and >=4.6.0,<=4.6.1 conta...", "creation_timestamp": "2026-08-13T13:14:42.153472Z"} 2026-08-13T13:14:42.153472+00:00 https://vulnerability.circl.lu/sighting/c7c03670-4dde-489a-854a-3b26171c4744/export 2026-09-02T23:59:16.703442+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c7c03670-4dde-489a-854a-3b26171c4744", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73628", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cj4lq6yw2y5wn", "content": "CVE-2026-73628 - Serendipity 2.3.5 Reflected XSS via search clean-URL route\nCVE ID : CVE-2026-73628\n \n Published : Aug. 13, 2026, 12:17 p.m. | 17\u00a0minutes ago\n \n Description : Serendipity versions >= 2.3.5 and <= 2.6.0 contain a reflected cross-site scripting vulnerabilit...", "creation_timestamp": "2026-08-13T13:12:41.682838Z"} 2026-08-13T13:12:41.682838+00:00 https://vulnerability.circl.lu/sighting/ba844a7b-781b-44cd-8a6b-8bef03fffdd4/export 2026-09-02T23:59:16.703539+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ba844a7b-781b-44cd-8a6b-8bef03fffdd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73629", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jvs5wvrv4ffue", "content": "CVE-2026-73629 - Serendipity before 2.6.0 SSRF via hex IPv4 and IPv6 addresses\nCVE ID : CVE-2026-73629\n \n Published : Aug. 13, 2026, 12:17 p.m. | 17\u00a0minutes ago\n \n Description : Serendipity before 2.6.0 contains a server-side request forgery vulnerability in the serendipity_ur...", "creation_timestamp": "2026-08-13T13:06:41.885180Z"} 2026-08-13T13:06:41.885180+00:00 https://vulnerability.circl.lu/sighting/2f733918-ac0f-435c-a40c-3f920aa14381/export 2026-09-02T23:59:16.703646+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "2f733918-ac0f-435c-a40c-3f920aa14381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73625", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/32wcjv3b7dqkl", "content": "CVE-2026-73625 - GitPython before 3.1.54 Remote Code Execution via kwarg value smuggling\nCVE ID : CVE-2026-73625\n \n Published : Aug. 13, 2026, 12:17 p.m. | 17\u00a0minutes ago\n \n Description : GitPython versions before 3.1.54 contain a remote code execution vulnerability in the che...", "creation_timestamp": "2026-08-13T13:00:41.469802Z"} 2026-08-13T13:00:41.469802+00:00 https://vulnerability.circl.lu/sighting/bac48ee8-cca5-4e3e-acb4-9e48d2b13a9e/export 2026-09-02T23:59:16.703747+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "bac48ee8-cca5-4e3e-acb4-9e48d2b13a9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73626", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cdvs2ljzsbbrs", "content": "CVE-2026-73626 - JupyterLab before 4.6.2 Authentication Bypass via PyPIExtensionManager\nCVE ID : CVE-2026-73626\n \n Published : Aug. 13, 2026, 12:17 p.m. | 17\u00a0minutes ago\n \n Description : JupyterLab versions >=4.6.0,<=4.6.1 and <=4.5.9 contain an allowlist/blocklist en...", "creation_timestamp": "2026-08-13T12:54:43.134964Z"} 2026-08-13T12:54:43.134964+00:00