https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 02 Jul 2026 04:34:35 +0000 https://vulnerability.circl.lu/sighting/3a4f6078-39a8-4354-a51d-ff2ece6d32f7/export {"uuid": "3a4f6078-39a8-4354-a51d-ff2ece6d32f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50016", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mplbhczzou2a", "content": "\ud83d\udccc CVE-2026-50016 - pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm allows a transitive dependency alias from registry package metadata to contain path trave... https://www.cyberhub.blog/cves/CVE-2026-50016", "creation_timestamp": "2026-07-01T10:07:06.894100Z"} {"uuid": "3a4f6078-39a8-4354-a51d-ff2ece6d32f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50016", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mplbhczzou2a", "content": "\ud83d\udccc CVE-2026-50016 - pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm allows a transitive dependency alias from registry package metadata to contain path trave... https://www.cyberhub.blog/cves/CVE-2026-50016", "creation_timestamp": "2026-07-01T10:07:06.894100Z"} https://vulnerability.circl.lu/sighting/3a4f6078-39a8-4354-a51d-ff2ece6d32f7/export Wed, 01 Jul 2026 10:07:06 +0000 https://vulnerability.circl.lu/sighting/041852e0-1ad1-4db3-b44c-299b4265190a/export {"uuid": "041852e0-1ad1-4db3-b44c-299b4265190a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50016", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphre6wvtm2k", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-50016 \u0432 pnpm: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u043d\u0430 Node.js\n\n\n\nhttps://kripta.biz/posts/398D67DF-1697-4418-BCAF-4FC38E9E0C4B", "creation_timestamp": "2026-06-30T00:41:03.012106Z"} {"uuid": "041852e0-1ad1-4db3-b44c-299b4265190a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50016", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphre6wvtm2k", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-50016 \u0432 pnpm: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u043d\u0430 Node.js\n\n\n\nhttps://kripta.biz/posts/398D67DF-1697-4418-BCAF-4FC38E9E0C4B", "creation_timestamp": "2026-06-30T00:41:03.012106Z"} https://vulnerability.circl.lu/sighting/041852e0-1ad1-4db3-b44c-299b4265190a/export Tue, 30 Jun 2026 00:41:03 +0000 https://vulnerability.circl.lu/sighting/44463113-424f-4ec2-b52a-255c703b8672/export {"uuid": "44463113-424f-4ec2-b52a-255c703b8672", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50015", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphlsrfcau2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-50015 \u0432 pnpm: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/51610255-05D6-4679-BEE4-AF15CEB1F190", "creation_timestamp": "2026-06-29T23:01:49.249141Z"} {"uuid": "44463113-424f-4ec2-b52a-255c703b8672", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50015", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphlsrfcau2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-50015 \u0432 pnpm: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/51610255-05D6-4679-BEE4-AF15CEB1F190", "creation_timestamp": "2026-06-29T23:01:49.249141Z"} https://vulnerability.circl.lu/sighting/44463113-424f-4ec2-b52a-255c703b8672/export Mon, 29 Jun 2026 23:01:49 +0000 https://vulnerability.circl.lu/sighting/17f24ce6-21d0-4574-9cb8-d19d83b2e306/export {"uuid": "17f24ce6-21d0-4574-9cb8-d19d83b2e306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50014", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphlqt4iwq2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-50014 \u0432 pnpm: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/9CFC37DF-06E2-40DC-B3FC-C25232494A07", "creation_timestamp": "2026-06-29T23:00:44.042745Z"} {"uuid": "17f24ce6-21d0-4574-9cb8-d19d83b2e306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50014", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphlqt4iwq2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-50014 \u0432 pnpm: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/9CFC37DF-06E2-40DC-B3FC-C25232494A07", "creation_timestamp": "2026-06-29T23:00:44.042745Z"} https://vulnerability.circl.lu/sighting/17f24ce6-21d0-4574-9cb8-d19d83b2e306/export Mon, 29 Jun 2026 23:00:44 +0000 https://vulnerability.circl.lu/sighting/83046d30-a6df-44c6-a997-ffa9ec378b4b/export {"uuid": "83046d30-a6df-44c6-a997-ffa9ec378b4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50014", "type": "published-proof-of-concept", "source": "https://github.com/pnpm/pnpm/security/advisories/GHSA-p4xf-rf54-rj3x", "content": "", "creation_timestamp": "2026-06-27T00:35:34.571157Z"} {"uuid": "83046d30-a6df-44c6-a997-ffa9ec378b4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50014", "type": "published-proof-of-concept", "source": "https://github.com/pnpm/pnpm/security/advisories/GHSA-p4xf-rf54-rj3x", "content": "", "creation_timestamp": "2026-06-27T00:35:34.571157Z"} https://vulnerability.circl.lu/sighting/83046d30-a6df-44c6-a997-ffa9ec378b4b/export Sat, 27 Jun 2026 00:35:34 +0000 https://vulnerability.circl.lu/sighting/26d1e211-b77c-44c8-b072-18d07c175360/export {"uuid": "26d1e211-b77c-44c8-b072-18d07c175360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50016", "type": "published-proof-of-concept", "source": "https://github.com/pnpm/pnpm/security/advisories/GHSA-hwx4-2j3j-g496", "content": "", "creation_timestamp": "2026-06-27T00:35:31.920805Z"} {"uuid": "26d1e211-b77c-44c8-b072-18d07c175360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50016", "type": "published-proof-of-concept", "source": "https://github.com/pnpm/pnpm/security/advisories/GHSA-hwx4-2j3j-g496", "content": "", "creation_timestamp": "2026-06-27T00:35:31.920805Z"} https://vulnerability.circl.lu/sighting/26d1e211-b77c-44c8-b072-18d07c175360/export Sat, 27 Jun 2026 00:35:31 +0000 https://vulnerability.circl.lu/sighting/f8a81cca-f93c-484d-8687-468d95ceb6a5/export {"uuid": "f8a81cca-f93c-484d-8687-468d95ceb6a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50015", "type": "published-proof-of-concept", "source": "https://github.com/pnpm/pnpm/security/advisories/GHSA-rxhj-4m44-96r4", "content": "", "creation_timestamp": "2026-06-27T00:35:29.513364Z"} {"uuid": "f8a81cca-f93c-484d-8687-468d95ceb6a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50015", "type": "published-proof-of-concept", "source": "https://github.com/pnpm/pnpm/security/advisories/GHSA-rxhj-4m44-96r4", "content": "", "creation_timestamp": "2026-06-27T00:35:29.513364Z"} https://vulnerability.circl.lu/sighting/f8a81cca-f93c-484d-8687-468d95ceb6a5/export Sat, 27 Jun 2026 00:35:29 +0000 https://vulnerability.circl.lu/sighting/18223296-42aa-4e97-9404-ac2fdf5835ea/export {"uuid": "18223296-42aa-4e97-9404-ac2fdf5835ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50015", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp52rdwmyw2u", "content": "CVE-2026-50015 - pnpm: Arbitrary File Write/Delete via Malicious Patch File (Path Traversal)\nCVE ID : CVE-2026-50015\n \n Published : June 25, 2026, 4:52 p.m. | 52\u00a0minutes ago\n \n Description : pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm's patch application pipel...", "creation_timestamp": "2026-06-25T18:30:10.701769Z"} {"uuid": "18223296-42aa-4e97-9404-ac2fdf5835ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50015", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp52rdwmyw2u", "content": "CVE-2026-50015 - pnpm: Arbitrary File Write/Delete via Malicious Patch File (Path Traversal)\nCVE ID : CVE-2026-50015\n \n Published : June 25, 2026, 4:52 p.m. | 52\u00a0minutes ago\n \n Description : pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm's patch application pipel...", "creation_timestamp": "2026-06-25T18:30:10.701769Z"} https://vulnerability.circl.lu/sighting/18223296-42aa-4e97-9404-ac2fdf5835ea/export Thu, 25 Jun 2026 18:30:10 +0000 https://vulnerability.circl.lu/sighting/339631e1-1fec-4812-b9a4-f12e1e3d1ba5/export {"uuid": "339631e1-1fec-4812-b9a4-f12e1e3d1ba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50016", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp4yzms5tm2j", "content": "CVE-2026-50016 - pnpm: Transitive dependency alias path traversal allows project path override via symlink replacement\nCVE ID : CVE-2026-50016\n \n Published : June 25, 2026, 4:53 p.m. | 51\u00a0minutes ago\n \n Description : pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm...", "creation_timestamp": "2026-06-25T17:59:00.887568Z"} {"uuid": "339631e1-1fec-4812-b9a4-f12e1e3d1ba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50016", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp4yzms5tm2j", "content": "CVE-2026-50016 - pnpm: Transitive dependency alias path traversal allows project path override via symlink replacement\nCVE ID : CVE-2026-50016\n \n Published : June 25, 2026, 4:53 p.m. | 51\u00a0minutes ago\n \n Description : pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm...", "creation_timestamp": "2026-06-25T17:59:00.887568Z"} https://vulnerability.circl.lu/sighting/339631e1-1fec-4812-b9a4-f12e1e3d1ba5/export Thu, 25 Jun 2026 17:59:00 +0000 https://vulnerability.circl.lu/sighting/15dc3f10-96db-43f8-b254-b8e72f948931/export {"uuid": "15dc3f10-96db-43f8-b254-b8e72f948931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50017", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp4yn7uldp2j", "content": "CVE-2026-50017 - pnpm binds unscoped user-level npm auth credentials to a repository-selected registry\nCVE ID : CVE-2026-50017\n \n Published : June 25, 2026, 4:56 p.m. | 48\u00a0minutes ago\n \n Description : pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm can send user-l...", "creation_timestamp": "2026-06-25T17:52:07.116063Z"} {"uuid": "15dc3f10-96db-43f8-b254-b8e72f948931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50017", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp4yn7uldp2j", "content": "CVE-2026-50017 - pnpm binds unscoped user-level npm auth credentials to a repository-selected registry\nCVE ID : CVE-2026-50017\n \n Published : June 25, 2026, 4:56 p.m. | 48\u00a0minutes ago\n \n Description : pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm can send user-l...", "creation_timestamp": "2026-06-25T17:52:07.116063Z"} https://vulnerability.circl.lu/sighting/15dc3f10-96db-43f8-b254-b8e72f948931/export Thu, 25 Jun 2026 17:52:07 +0000