https://vulnerability.circl.lu/sightings/feed 2026-09-02T20:33:53.096615+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/99da2118-5d2b-4409-beaf-098e7d5b240a/export 2026-09-02T20:33:53.124359+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "99da2118-5d2b-4409-beaf-098e7d5b240a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16231", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muhvtgge5y2f", "content": "\ud83d\udccc CVE-2026-16231 - hbs is an Express view engine that wraps Handlebars. Its registerAsyncHelper API bypasses Handlebars' automatic HTML escaping: an async helper returns... https://www.cyberhub.blog/cves/CVE-2026-16231", "creation_timestamp": "2026-09-01T17:07:07.362777Z"} 2026-09-01T17:07:07.362777+00:00 https://vulnerability.circl.lu/sighting/71d34b04-2a96-4306-b6f2-031027d5d7fc/export 2026-09-02T20:33:53.125959+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "71d34b04-2a96-4306-b6f2-031027d5d7fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16231", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtvvcw45mq2m", "content": "hbs\u306eregisterAsyncHelper API\u306b\u8106\u5f31\u6027\u304c\u3042\u308a\u3001\u30d0\u30fc\u30b8\u30e7\u30f32.1.0\uff5e4.2.1\u3067\u3001\u653b\u6483\u8005\u306b\u3088\u308aHTML/JS\u304c\u6ce8\u5165\u3055\u308cXSS\u653b\u6483\u304c\u53ef\u80fd\u306b\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-16231 CVSS 8.1 | HIGH", "creation_timestamp": "2026-08-25T13:09:57.784582Z"} 2026-08-25T13:09:57.784582+00:00 https://vulnerability.circl.lu/sighting/3e5a0b90-b645-4f58-9a64-a3543d728d3c/export 2026-09-02T20:33:53.126095+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3e5a0b90-b645-4f58-9a64-a3543d728d3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16231", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mtvkvlxvjs22", "content": "\ud83d\udea8 High-severity security fix in hbs@4.3.0 just released!\n\nPatches CVE-2026-16231. XSS via registerAsyncHelper output-escaping bypass.\n\ngithub.com/pillarjs/hbs...", "creation_timestamp": "2026-08-25T10:03:33.649955Z"} 2026-08-25T10:03:33.649955+00:00