<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 17 Jun 2026 02:50:08 +0000</lastBuildDate>
    <item>
      <title>65ba464c-a833-4095-9999-f27fd69f968c</title>
      <link>https://vulnerability.circl.lu/sighting/65ba464c-a833-4095-9999-f27fd69f968c/export</link>
      <description>{"uuid": "65ba464c-a833-4095-9999-f27fd69f968c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26294", "type": "seen", "source": "https://t.me/cibsecurity/21555", "content": "\u203c CVE-2020-26294 \u203c\n\nVela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. In Vela compiler before version 0.6.1 there is a vulnerability which allows exposure of server configuration. It impacts all users of Vela. An attacker can use Sprig's `env` function to retrieve configuration information, see referenced GHSA for an example. This has been fixed in version 0.6.1. In addition to upgrading, it is recommended to rotate all secrets.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-04T23:25:09.000000Z"}</description>
      <content:encoded>{"uuid": "65ba464c-a833-4095-9999-f27fd69f968c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26294", "type": "seen", "source": "https://t.me/cibsecurity/21555", "content": "\u203c CVE-2020-26294 \u203c\n\nVela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. In Vela compiler before version 0.6.1 there is a vulnerability which allows exposure of server configuration. It impacts all users of Vela. An attacker can use Sprig's `env` function to retrieve configuration information, see referenced GHSA for an example. This has been fixed in version 0.6.1. In addition to upgrading, it is recommended to rotate all secrets.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-04T23:25:09.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/65ba464c-a833-4095-9999-f27fd69f968c/export</guid>
      <pubDate>Mon, 04 Jan 2021 23:25:09 +0000</pubDate>
    </item>
  </channel>
</rss>
