https://vulnerability.circl.lu/sightings/feed 2026-07-19T06:07:43.407866+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/6aa25551-d2f1-4dd1-a0bd-58946848fff1/export 2026-07-19T06:07:43.429346+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6aa25551-d2f1-4dd1-a0bd-58946848fff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwggknxnc22", "content": "\ud83d\udfe0 CVE-2026-9147 - High (7.8)\n\nuproot dynamically generates Python class source code from ROOT TStreamerInfo records in a file a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-9147/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T14:00:39.165295Z"} 2026-07-18T14:00:39.165295+00:00 https://vulnerability.circl.lu/sighting/a1ab318b-e6ae-465a-aa5f-c16678a032d6/export 2026-07-19T06:07:43.432828+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a1ab318b-e6ae-465a-aa5f-c16678a032d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9147", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqweqn3ya72g", "content": "scikit-hep uproot HIGH-severity bug (CVE-2026-9147): Crafted ROOT files can inject code, risking app takeover. Don\u2019t process untrusted files \u2014 check for patches. https://radar.offseq.com/threat/cve-2026-9147-improper-control-of-generation-of-code-code-injection-in-scikit-hep-uproot-a352d097ded08c...", "creation_timestamp": "2026-07-18T13:30:30.162619Z"} 2026-07-18T13:30:30.162619+00:00 https://vulnerability.circl.lu/sighting/ab6cdb59-1ab6-456d-a5f4-7513cf294b9a/export 2026-07-19T06:07:43.432995+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ab6cdb59-1ab6-456d-a5f4-7513cf294b9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9147", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116941221213811825", "content": "scikit-hep uproot has a HIGH-severity code injection flaw (CVE-2026-9147, CVSS 8.5). Malicious ROOT files can trigger arbitrary Python code execution. Avoid untrusted files until fixed. Full details: https://radar.offseq.com/threat/cve-2026-9147-improper-control-of-generation-of-code-code-injection-in-scikit-hep-uproot-a352d097ded08c6a #OffSeq #Vulnerability #Python #ThreatIntel", "creation_timestamp": "2026-07-18T13:30:27.989896Z"} 2026-07-18T13:30:27.989896+00:00 https://vulnerability.circl.lu/sighting/4f07f2da-8318-40c1-a97e-48e493fa49f2/export 2026-07-19T06:07:43.433111+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4f07f2da-8318-40c1-a97e-48e493fa49f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91470", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdytbxfvo426", "content": "", "creation_timestamp": "2026-02-04T02:28:31.663036Z"} 2026-02-04T02:28:31.663036+00:00 https://vulnerability.circl.lu/sighting/90083391-4e3d-4c76-9972-7f55e659e633/export 2026-07-19T06:07:43.433211+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "90083391-4e3d-4c76-9972-7f55e659e633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91470", "type": "seen", "source": "https://bsky.app/profile/jakebailey.dev/post/3mdya4u3z4k2h", "content": "", "creation_timestamp": "2026-02-03T20:45:38.575320Z"} 2026-02-03T20:45:38.575320+00:00