https://vulnerability.circl.lu/sightings/feed 2026-06-26T01:34:33.245291+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/dda6ce6f-1ac0-4cc5-b0cd-a94855ae4292/export 2026-06-26T01:34:33.265743+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "dda6ce6f-1ac0-4cc5-b0cd-a94855ae4292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41690", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mleazdfstp2c", "content": "\ud83d\udfe0 CVE-2026-41690 - High (8.6)\n\n18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fas...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41690/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-08T17:29:53.380360Z"} 2026-05-08T17:29:53.380360+00:00 https://vulnerability.circl.lu/sighting/e09b36e9-2ad1-4b49-bbdc-9c40c0584249/export 2026-06-26T01:34:33.265637+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e09b36e9-2ad1-4b49-bbdc-9c40c0584249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41693", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mleazkwl3f2s", "content": "\ud83d\udfe0 CVE-2026-41693 - High (8.2)\n\ni18next-fs-backend is a backend layer for i18next using in Node.js and for Deno to load translati...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41693/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-08T17:30:01.175631Z"} 2026-05-08T17:30:01.175631+00:00 https://vulnerability.circl.lu/sighting/46310ccd-77fe-4e82-be91-2d8f4816a67b/export 2026-06-26T01:34:33.265535+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "46310ccd-77fe-4e82-be91-2d8f4816a67b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41690", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mleepyw5wy2i", "content": "CVE-2026-41690 - Prototype pollution and path traversal in i18next-http-middleware via user-controlled language and namespace parameters\nCVE ID : CVE-2026-41690\n \n Published : May 8, 2026, 4:16 p.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : 18next-http-middleware is a middlewa...", "creation_timestamp": "2026-05-08T18:36:14.742593Z"} 2026-05-08T18:36:14.742593+00:00 https://vulnerability.circl.lu/sighting/e9539c9d-ee59-4702-b839-fd329a9bb77f/export 2026-06-26T01:34:33.265434+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e9539c9d-ee59-4702-b839-fd329a9bb77f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41693", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlefpmjr262k", "content": "CVE-2026-41693 - i18next-fs-backend: Path traversal via unsanitised lng/ns allows arbitrary file read/overwrite\nCVE ID : CVE-2026-41693\n \n Published : May 8, 2026, 4:16 p.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : i18next-fs-backend is a backend layer for i18next using in No...", "creation_timestamp": "2026-05-08T18:53:55.488181Z"} 2026-05-08T18:53:55.488181+00:00 https://vulnerability.circl.lu/sighting/d9085a79-1732-47e0-9881-b0f3c4ffdc9e/export 2026-06-26T01:34:33.265328+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d9085a79-1732-47e0-9881-b0f3c4ffdc9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41695", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvwjl2q6v2i", "content": "\ud83d\udfe0 CVE-2026-41695 - High (7.5)\n\nSpring Data Commons applications may be vulnerable to denial of service through resource exhausti...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41695/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T05:00:26.064732Z"} 2026-06-10T05:00:26.064732+00:00 https://vulnerability.circl.lu/sighting/79fe459c-e77b-4173-bc93-d30013893728/export 2026-06-26T01:34:33.265224+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "79fe459c-e77b-4173-bc93-d30013893728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41699", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnyr2ucwjy2n", "content": "\ud83d\udfe0 CVE-2026-41699 - High (8.1)\n\nSpring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginate...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41699/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-11T08:00:43.304211Z"} 2026-06-11T08:00:43.304211+00:00 https://vulnerability.circl.lu/sighting/43ef3f4e-40a8-4ffc-b331-a5008deb035d/export 2026-06-26T01:34:33.265119+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "43ef3f4e-40a8-4ffc-b331-a5008deb035d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41699", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnyvujrrsc2i", "content": "CVE-2026-41699 - Unsafe Deserialization in Spring GraphQL\nCVE ID : CVE-2026-41699\n \n Published : June 11, 2026, 7:16 a.m. | 1\u00a0hour, 47\u00a0minutes ago\n \n Description : Spring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL querie...", "creation_timestamp": "2026-06-11T09:26:38.213473Z"} 2026-06-11T09:26:38.213473+00:00 https://vulnerability.circl.lu/sighting/ee510716-9fc6-4aa4-af8a-bb76623598da/export 2026-06-26T01:34:33.265011+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ee510716-9fc6-4aa4-af8a-bb76623598da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41699", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobvo7j3kj23", "content": "\ud83d\udea8 ALERT: CVE-2026-41699\n\nCVSS 8.1/10\n\n\ud83d\udccb WHAT IT IS:\nSpring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL queries. An attacker can craft a malicious GraphQL request that can lead to Remote Code Execution when the application exposes a paginated (", "creation_timestamp": "2026-06-14T23:17:06.698776Z"} 2026-06-14T23:17:06.698776+00:00 https://vulnerability.circl.lu/sighting/93f01e43-d092-413e-b125-9dac5e52df45/export 2026-06-26T01:34:33.264863+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "93f01e43-d092-413e-b125-9dac5e52df45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41699", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mofrmmqg672x", "content": "\ud83d\udd17 CVE : CVE-2026-41001, CVE-2026-41699, CVE-2026-41700, CVE-2026-41856", "creation_timestamp": "2026-06-16T12:15:14.673597Z"} 2026-06-16T12:15:14.673597+00:00 https://vulnerability.circl.lu/sighting/b1f37976-dd56-4793-ac4e-cb35e5b8207b/export 2026-06-26T01:34:33.261518+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b1f37976-dd56-4793-ac4e-cb35e5b8207b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41699", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motmkqsfwd2v", "content": "\ud83d\udea8 ALERT: CVE-2026-41699\n\nCVSS 8.1/10\n\n\ud83d\udccb WHAT IT IS:\nSpring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL queries. An attacker can craft a malicious GraphQL request that can lead to Remote Code Execution when the application exposes a paginated (", "creation_timestamp": "2026-06-22T00:21:59.120336Z"} 2026-06-22T00:21:59.120336+00:00