https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 30 Jun 2026 10:27:14 +0000 https://vulnerability.circl.lu/sighting/ba2a6f92-f3c9-4c59-9770-51d201613954/export {"uuid": "ba2a6f92-f3c9-4c59-9770-51d201613954", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-49359", "type": "published-proof-of-concept", "source": "https://github.com/pontedilana/php-weasyprint/security/advisories/GHSA-x8g9-h984-pc36", "content": "", "creation_timestamp": "2026-06-27T00:35:49.647749Z"} {"uuid": "ba2a6f92-f3c9-4c59-9770-51d201613954", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-49359", "type": "published-proof-of-concept", "source": "https://github.com/pontedilana/php-weasyprint/security/advisories/GHSA-x8g9-h984-pc36", "content": "", "creation_timestamp": "2026-06-27T00:35:49.647749Z"} https://vulnerability.circl.lu/sighting/ba2a6f92-f3c9-4c59-9770-51d201613954/export Sat, 27 Jun 2026 00:35:49 +0000 https://vulnerability.circl.lu/sighting/2eb81710-ac68-4037-8a30-b81756d2f9cd/export {"uuid": "2eb81710-ac68-4037-8a30-b81756d2f9cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49359", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mp7ykmyves2b", "content": "A PDF feature can be turned into a window into your servers.\n\nphp-weasyprint (1.2M+ installs) fetched attacker-controlled URLs server-side. Cloud metadata and local files were both in reach.\n\nRun it? Upgrade to 2.6.0. (CVE-2026-49359)", "creation_timestamp": "2026-06-26T22:28:37.797194Z"} {"uuid": "2eb81710-ac68-4037-8a30-b81756d2f9cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49359", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mp7ykmyves2b", "content": "A PDF feature can be turned into a window into your servers.\n\nphp-weasyprint (1.2M+ installs) fetched attacker-controlled URLs server-side. Cloud metadata and local files were both in reach.\n\nRun it? Upgrade to 2.6.0. (CVE-2026-49359)", "creation_timestamp": "2026-06-26T22:28:37.797194Z"} https://vulnerability.circl.lu/sighting/2eb81710-ac68-4037-8a30-b81756d2f9cd/export Fri, 26 Jun 2026 22:28:37 +0000