<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 20 Jun 2026 14:19:04 +0000</lastBuildDate>
    <item>
      <title>753bd682-4616-4ca6-bcd1-86fa06630c36</title>
      <link>https://vulnerability.circl.lu/sighting/753bd682-4616-4ca6-bcd1-86fa06630c36/export</link>
      <description>{"uuid": "753bd682-4616-4ca6-bcd1-86fa06630c36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44517", "type": "seen", "source": "https://bsky.app/profile/mfahlandt.bsky.social/post/3modarvnx3m26", "content": "\ud83d\udee1\ufe0f LWCN 2026, Week 25 highlights:\n* Podman v5.8.3 addresses CVE-2026-44517 (Dockerfile build file inclusion).\n* OPA v1.17.1 fixes Go stdlib CVEs GO-2026-5039, GO-2026-5037.\n* Dapr v1.18.0 introduces workflow history signing and verification.\nFull breakdown:\n\nhttps://lwcn.dev/newsletter/2026-week-25/", "creation_timestamp": "2026-06-15T12:08:38.544020Z"}</description>
      <content:encoded>{"uuid": "753bd682-4616-4ca6-bcd1-86fa06630c36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44517", "type": "seen", "source": "https://bsky.app/profile/mfahlandt.bsky.social/post/3modarvnx3m26", "content": "\ud83d\udee1\ufe0f LWCN 2026, Week 25 highlights:\n* Podman v5.8.3 addresses CVE-2026-44517 (Dockerfile build file inclusion).\n* OPA v1.17.1 fixes Go stdlib CVEs GO-2026-5039, GO-2026-5037.\n* Dapr v1.18.0 introduces workflow history signing and verification.\nFull breakdown:\n\nhttps://lwcn.dev/newsletter/2026-week-25/", "creation_timestamp": "2026-06-15T12:08:38.544020Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/753bd682-4616-4ca6-bcd1-86fa06630c36/export</guid>
      <pubDate>Mon, 15 Jun 2026 12:08:38 +0000</pubDate>
    </item>
    <item>
      <title>4259dfd2-17eb-404f-bf5a-5479f02dea2c</title>
      <link>https://vulnerability.circl.lu/sighting/4259dfd2-17eb-404f-bf5a-5479f02dea2c/export</link>
      <description>{"uuid": "4259dfd2-17eb-404f-bf5a-5479f02dea2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44517", "type": "seen", "source": "https://bsky.app/profile/canartuc.com/post/3moe7usgnrr2l", "content": "Podman 5.8.3 patches CVE-2026-44517, where ADD or COPY against a crafted Git repo or tar archive could escape the build context and grab files it should not. Buildah 1.43.2 is bundled. Building images from third-party Dockerfiles, where does your trust boundary actually sit?\n#containers", "creation_timestamp": "2026-06-15T21:25:02.098068Z"}</description>
      <content:encoded>{"uuid": "4259dfd2-17eb-404f-bf5a-5479f02dea2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44517", "type": "seen", "source": "https://bsky.app/profile/canartuc.com/post/3moe7usgnrr2l", "content": "Podman 5.8.3 patches CVE-2026-44517, where ADD or COPY against a crafted Git repo or tar archive could escape the build context and grab files it should not. Buildah 1.43.2 is bundled. Building images from third-party Dockerfiles, where does your trust boundary actually sit?\n#containers", "creation_timestamp": "2026-06-15T21:25:02.098068Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4259dfd2-17eb-404f-bf5a-5479f02dea2c/export</guid>
      <pubDate>Mon, 15 Jun 2026 21:25:02 +0000</pubDate>
    </item>
  </channel>
</rss>
