https://vulnerability.circl.lu/sightings/feed 2026-10-01T21:51:21.277602+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/54e73b92-eb87-4a8c-a41d-53548d2227c0/export 2026-10-01T21:51:21.305490+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "54e73b92-eb87-4a8c-a41d-53548d2227c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96760", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwt5brd6xq2m", "content": "CVE-2026-96760 - authlib\nThe Authlib software (versions up to 1.7.2) may treat data as securely signed even when no signature is present. This lets an attacker create fake authentication tokens that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#authlib #UbuntuPro2204LTS #CVE #infosec", "creation_timestamp": "2026-10-01T15:10:05.525780Z"} 2026-10-01T15:10:05.525780+00:00 https://vulnerability.circl.lu/sighting/016fca5e-0aa6-4aa9-819e-62c55cdfe9b1/export 2026-10-01T21:51:21.306941+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "016fca5e-0aa6-4aa9-819e-62c55cdfe9b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96760", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mwnkqbqft224", "content": "\u3010\u4fee\u6b63\u7248\u306a\u3057\u3011Authlib \u306b\u7f72\u540d\u691c\u8a3c\u306e\u56de\u907f\uff08CVE-2026-96760\uff09\u3002signatures \u304c\u7a7a\u914d\u5217\u306eJWS\u3092\u300c\u691c\u8a3c\u6e08\u307f\u300d\u3068\u3057\u3066\u8fd4\u3057\u307e\u3059\u3002\u9375\u3082\u7f72\u540d\u3082\u8981\u308a\u307e\u305b\u3093\u3002\n\nCVE\u306f\u300c1.7.2\u4ee5\u4e0b\u300d\u3068\u3057\u3066\u3044\u307e\u3059\u304c\u3001jws.py \u306f v1.7.2\u30fbv1.8.0\u30fbmaster \u3067\u540c\u4e00\u30d5\u30a1\u30a4\u30eb\u3067\u3057\u305f\u3002\u5bfe\u8c61\u306fJWS\u306eJSON\u5f62\u5f0f\u3092\u53d7\u3051\u53d6\u308b\u7d4c\u8def\u3060\u3051\u3067\u3001jwt.decode() \u306f\u5f71\u97ff\u3092\u53d7\u3051\u307e\u305b\u3093\u3002\n\nforsmile.jp/articles/aut...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-09-29T09:54:54.138876Z"} 2026-09-29T09:54:54.138876+00:00 https://vulnerability.circl.lu/sighting/1b26a9cb-efdf-426f-ae2f-e4d15f2104a2/export 2026-10-01T21:51:21.307058+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "1b26a9cb-efdf-426f-ae2f-e4d15f2104a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96760", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwmq7gsbjq2c", "content": "An Authlib signature bypass vulnerability (CVE-2026-96760, CVE-2026-28802, CVE-2026-27962) lets attackers forge JWS payloads. Update libraries now.\n\n#Authlib #CVE202696760 #Cybersecurity #JWS #Vulnerability", "creation_timestamp": "2026-09-29T02:00:09.937178Z"} 2026-09-29T02:00:09.937178+00:00