https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 24 Aug 2026 23:13:59 +0000 https://vulnerability.circl.lu/sighting/b404c0e0-d679-493c-b702-e9a93957499a/export {"uuid": "b404c0e0-d679-493c-b702-e9a93957499a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53965", "type": "seen", "source": "https://gist.github.com/FR-Flo/312c3f50bce696ca594e8806df98ff03", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Trello**\n - [Attributs required par cat\u00e9gorie](https://trello.com/c/2loCszpt/1854-attributs-required-par-cat%C3%A9gorie) **\ud83e\udd73Testing**\n - *Feat: Makes attributes required or not per categories* [\\#7474](https://github.com/Wishibam/Marketplace-api/pull/7474)\n - [\ud83d\udfe2 Int\u00e9gration des fanions promotionnels \u2014 Ajout image au tag de taxon (MP) (\u00e9volution n\u00b011)](https://trello.com/c/fNNkiR1c/2405-%F0%9F%9F%A2-int%C3%A9gration-des-fanions-promotionnels-ajout-image-au-tag-de-taxon-mp-%C3%A9volution-n11) **\ud83e\udd75 Retour de test**\n - *:sparkles: feat: fanions de taxon \u2014 images desktop/mobile (MP-api)* [\\#7617](https://github.com/Wishibam/Marketplace-api/pull/7617)\n - [MP - Cr\u00e9ation / modification m\u00e9thode de livraison - impossible de save](https://trello.com/c/Ud1DRxgj/2407-mp-cr%C3%A9ation-modification-m%C3%A9thode-de-livraison-impossible-de-save) **\ud83e\udd75 Retour de test**\n - *:bug: MP Fix Dpd class, file and discriminator name* [\\#7757](https://github.com/Wishibam/Marketplace-api/pull/7757)\n - [Ticket de caisse - pb de cache](https://trello.com/c/EwgktbXZ/2493-ticket-de-caisse-pb-de-cache) **\ud83e\udd75 Retour de test**\n - *:bug: fix: reset receipt cache between export Messenger messages* [\\#7791](https://github.com/Wishibam/Marketplace-api/pull/7791)\n - [\ud83d\ude84 Commande exp\u00e9di\u00e9e : l'interface part trop vite et garde l'ancien statut](https://trello.com/c/6QmFnpyb/2418-%F0%9F%9A%84-commande-exp%C3%A9di%C3%A9e-linterface-part-trop-vite-et-garde-lancien-statut) **In review WMS**\n - *:sparkles: OMS order, add \"inProcessing\" flag* [\\#7797](https://github.com/Wishibam/Marketplace-api/pull/7797)\n - [MP - Sur le marchand (listing & d\u00e9tails), mettre un lien qui redirige directement vers le marchand en front](https://trello.com/c/Z136lbnm/1296-mp-sur-le-marchand-listing-d%C3%A9tails-mettre-un-lien-qui-redirige-directement-vers-le-marchand-en-front) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n - *:sparkles: Add retailer eshop link* [\\#7822](https://github.com/Wishibam/Marketplace-api/pull/7822)\n - [Tag - Ajout du champ \"Visibilit\u00e9\" c\u00f4t\u00e9 MP](https://trello.com/c/zPFP31T9/2398-tag-ajout-du-champ-visibilit%C3%A9-c%C3%B4t%C3%A9-mp) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n - *:sparkles: Add tag visibility field to retailer corner and category* [\\#7831](https://github.com/Wishibam/Marketplace-api/pull/7831)\n - [Nouvelle vue Enseigne -Partie 1-](https://trello.com/c/AVsRvxLu/2494-nouvelle-vue-enseigne-partie-1) **\ud83e\udd73Testing**\n - *:sparkles: OMS New enseigne view (front only) no interaction* [\\#7846](https://github.com/Wishibam/Marketplace-api/pull/7846)\n \n- **Misc**\n - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n - *:bug: WMS Log Message Container identifier* [\\#7810](https://github.com/Wishibam/Marketplace-api/pull/7810)\n - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n - *feat(mcp): add MCP server walking skeleton with list\\_organizations* [\\#7823](https://github.com/Wishibam/Marketplace-api/pull/7823)\n - *refactor(mcp): extract logic from ImportAction, RetailerNormalizer and RankProduct* [\\#7824](https://github.com/Wishibam/Marketplace-api/pull/7824)\n - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n - *feat(merchandising): actions de masse asynchrones avec lock par organisation* [\\#7828](https://github.com/Wishibam/Marketplace-api/pull/7828)\n - *Merge feat/mcp-walking-skeleton (simulate #7823 merge)* [\\#7832](https://github.com/Wishibam/Marketplace-api/pull/7832)\n - *feat(product-list): pipeline batch pour les actions de masse des listes produits* [\\#7833](https://github.com/Wishibam/Marketplace-api/pull/7833)\n - *feat(mcp): Add OAuth discovery* [\\#7834](https://github.com/Wishibam/Marketplace-api/pull/7834)\n - *:arrow\\_up: deps: bump mcp/sdk to 0.7.1 (CVE-2026-53965)* [\\#7838](https://github.com/Wishibam/Marketplace-api/pull/7838)\n - *:bug: fix: guard against null option name/value in CSV export* [\\#7841](https://github.com/Wishibam/Marketplace-api/pull/7841)\n - *:bug: fix: stream line item CSV export to fix memory exhaustion* [\\#7842](https://github.com/Wishibam/Marketplace-api/pull/7842)\n - *:arrow\\_up: deps: patch sodium\\_compat Ed25519 key validation vulnerability* [\\#7843](https://github.com/Wishibam/Marketplace-api/pull/7843)\n - *fix: attribut required category* [\\#7851](https://github.com/Wishibam/Marketplace-api/pull/7851)\n - *fix: batch action view* [\\#7852](https://github.com/Wishibam/Marketplace-api/pull/7852)\n - *:bug: fix: batch the retailers list health queries (N+1)* [\\#7854](https://github.com/Wishibam/Marketplace-api/pull/7854)\n \n- **D\u00e9j\u00e0 en production**\n - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n - *feat: allow max product variation at 380* [\\#7829](https://github.com/Wishibam/Marketplace-api/pull/7829)\n - *:bug: fix: stop gating unmapped counters on product validity* [\\#7835](https://github.com/Wishibam/Marketplace-api/pull/7835)\n - *:bug: fix: repair missing-mapping counters behind the retailer list icon* [\\#7837](https://github.com/Wishibam/Marketplace-api/pull/7837)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n V\u00e9rifier :\n curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n\n### [PR #7828](https://github.com/Wishibam/Marketplace-api/pull/7828) \u2014 feat(merchandising): actions de masse asynchrones avec lock par organisation\n\n - ansible en prod \u00e7a https://github.com/Wishibam/Infrastructure/pull/467\n", "creation_timestamp": "2026-08-24T15:51:03.660246Z"} {"uuid": "b404c0e0-d679-493c-b702-e9a93957499a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53965", "type": "seen", "source": "https://gist.github.com/FR-Flo/312c3f50bce696ca594e8806df98ff03", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Trello**\n - [Attributs required par cat\u00e9gorie](https://trello.com/c/2loCszpt/1854-attributs-required-par-cat%C3%A9gorie) **\ud83e\udd73Testing**\n - *Feat: Makes attributes required or not per categories* [\\#7474](https://github.com/Wishibam/Marketplace-api/pull/7474)\n - [\ud83d\udfe2 Int\u00e9gration des fanions promotionnels \u2014 Ajout image au tag de taxon (MP) (\u00e9volution n\u00b011)](https://trello.com/c/fNNkiR1c/2405-%F0%9F%9F%A2-int%C3%A9gration-des-fanions-promotionnels-ajout-image-au-tag-de-taxon-mp-%C3%A9volution-n11) **\ud83e\udd75 Retour de test**\n - *:sparkles: feat: fanions de taxon \u2014 images desktop/mobile (MP-api)* [\\#7617](https://github.com/Wishibam/Marketplace-api/pull/7617)\n - [MP - Cr\u00e9ation / modification m\u00e9thode de livraison - impossible de save](https://trello.com/c/Ud1DRxgj/2407-mp-cr%C3%A9ation-modification-m%C3%A9thode-de-livraison-impossible-de-save) **\ud83e\udd75 Retour de test**\n - *:bug: MP Fix Dpd class, file and discriminator name* [\\#7757](https://github.com/Wishibam/Marketplace-api/pull/7757)\n - [Ticket de caisse - pb de cache](https://trello.com/c/EwgktbXZ/2493-ticket-de-caisse-pb-de-cache) **\ud83e\udd75 Retour de test**\n - *:bug: fix: reset receipt cache between export Messenger messages* [\\#7791](https://github.com/Wishibam/Marketplace-api/pull/7791)\n - [\ud83d\ude84 Commande exp\u00e9di\u00e9e : l'interface part trop vite et garde l'ancien statut](https://trello.com/c/6QmFnpyb/2418-%F0%9F%9A%84-commande-exp%C3%A9di%C3%A9e-linterface-part-trop-vite-et-garde-lancien-statut) **In review WMS**\n - *:sparkles: OMS order, add \"inProcessing\" flag* [\\#7797](https://github.com/Wishibam/Marketplace-api/pull/7797)\n - [MP - Sur le marchand (listing & d\u00e9tails), mettre un lien qui redirige directement vers le marchand en front](https://trello.com/c/Z136lbnm/1296-mp-sur-le-marchand-listing-d%C3%A9tails-mettre-un-lien-qui-redirige-directement-vers-le-marchand-en-front) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n - *:sparkles: Add retailer eshop link* [\\#7822](https://github.com/Wishibam/Marketplace-api/pull/7822)\n - [Tag - Ajout du champ \"Visibilit\u00e9\" c\u00f4t\u00e9 MP](https://trello.com/c/zPFP31T9/2398-tag-ajout-du-champ-visibilit%C3%A9-c%C3%B4t%C3%A9-mp) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n - *:sparkles: Add tag visibility field to retailer corner and category* [\\#7831](https://github.com/Wishibam/Marketplace-api/pull/7831)\n - [Nouvelle vue Enseigne -Partie 1-](https://trello.com/c/AVsRvxLu/2494-nouvelle-vue-enseigne-partie-1) **\ud83e\udd73Testing**\n - *:sparkles: OMS New enseigne view (front only) no interaction* [\\#7846](https://github.com/Wishibam/Marketplace-api/pull/7846)\n \n- **Misc**\n - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n - *:bug: WMS Log Message Container identifier* [\\#7810](https://github.com/Wishibam/Marketplace-api/pull/7810)\n - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n - *feat(mcp): add MCP server walking skeleton with list\\_organizations* [\\#7823](https://github.com/Wishibam/Marketplace-api/pull/7823)\n - *refactor(mcp): extract logic from ImportAction, RetailerNormalizer and RankProduct* [\\#7824](https://github.com/Wishibam/Marketplace-api/pull/7824)\n - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n - *feat(merchandising): actions de masse asynchrones avec lock par organisation* [\\#7828](https://github.com/Wishibam/Marketplace-api/pull/7828)\n - *Merge feat/mcp-walking-skeleton (simulate #7823 merge)* [\\#7832](https://github.com/Wishibam/Marketplace-api/pull/7832)\n - *feat(product-list): pipeline batch pour les actions de masse des listes produits* [\\#7833](https://github.com/Wishibam/Marketplace-api/pull/7833)\n - *feat(mcp): Add OAuth discovery* [\\#7834](https://github.com/Wishibam/Marketplace-api/pull/7834)\n - *:arrow\\_up: deps: bump mcp/sdk to 0.7.1 (CVE-2026-53965)* [\\#7838](https://github.com/Wishibam/Marketplace-api/pull/7838)\n - *:bug: fix: guard against null option name/value in CSV export* [\\#7841](https://github.com/Wishibam/Marketplace-api/pull/7841)\n - *:bug: fix: stream line item CSV export to fix memory exhaustion* [\\#7842](https://github.com/Wishibam/Marketplace-api/pull/7842)\n - *:arrow\\_up: deps: patch sodium\\_compat Ed25519 key validation vulnerability* [\\#7843](https://github.com/Wishibam/Marketplace-api/pull/7843)\n - *fix: attribut required category* [\\#7851](https://github.com/Wishibam/Marketplace-api/pull/7851)\n - *fix: batch action view* [\\#7852](https://github.com/Wishibam/Marketplace-api/pull/7852)\n - *:bug: fix: batch the retailers list health queries (N+1)* [\\#7854](https://github.com/Wishibam/Marketplace-api/pull/7854)\n \n- **D\u00e9j\u00e0 en production**\n - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n - *feat: allow max product variation at 380* [\\#7829](https://github.com/Wishibam/Marketplace-api/pull/7829)\n - *:bug: fix: stop gating unmapped counters on product validity* [\\#7835](https://github.com/Wishibam/Marketplace-api/pull/7835)\n - *:bug: fix: repair missing-mapping counters behind the retailer list icon* [\\#7837](https://github.com/Wishibam/Marketplace-api/pull/7837)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n V\u00e9rifier :\n curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n\n### [PR #7828](https://github.com/Wishibam/Marketplace-api/pull/7828) \u2014 feat(merchandising): actions de masse asynchrones avec lock par organisation\n\n - ansible en prod \u00e7a https://github.com/Wishibam/Infrastructure/pull/467\n", "creation_timestamp": "2026-08-24T15:51:03.660246Z"} https://vulnerability.circl.lu/sighting/b404c0e0-d679-493c-b702-e9a93957499a/export Mon, 24 Aug 2026 15:51:03 +0000 https://vulnerability.circl.lu/sighting/7a78e6e4-eb8a-4b78-8838-2a9e793e2e4d/export {"uuid": "7a78e6e4-eb8a-4b78-8838-2a9e793e2e4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53965", "type": "seen", "source": "https://gist.github.com/FR-Flo/05ac136c9c9ce0232c5ef40f4fb2c11f", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Trello**\n - [Attributs required par cat\u00e9gorie](https://trello.com/c/2loCszpt/1854-attributs-required-par-cat%C3%A9gorie) **\ud83e\udd73Testing**\n - *Feat: Makes attributes required or not per categories* [\\#7474](https://github.com/Wishibam/Marketplace-api/pull/7474)\n - [\ud83d\udfe2 Int\u00e9gration des fanions promotionnels \u2014 Ajout image au tag de taxon (MP) (\u00e9volution n\u00b011)](https://trello.com/c/fNNkiR1c/2405-%F0%9F%9F%A2-int%C3%A9gration-des-fanions-promotionnels-ajout-image-au-tag-de-taxon-mp-%C3%A9volution-n11) **\ud83e\udd75 Retour de test**\n - *:sparkles: feat: fanions de taxon \u2014 images desktop/mobile (MP-api)* [\\#7617](https://github.com/Wishibam/Marketplace-api/pull/7617)\n - [MP - Cr\u00e9ation / modification m\u00e9thode de livraison - impossible de save](https://trello.com/c/Ud1DRxgj/2407-mp-cr%C3%A9ation-modification-m%C3%A9thode-de-livraison-impossible-de-save) **\ud83e\udd75 Retour de test**\n - *:bug: MP Fix Dpd class, file and discriminator name* [\\#7757](https://github.com/Wishibam/Marketplace-api/pull/7757)\n - [Ticket de caisse - pb de cache](https://trello.com/c/EwgktbXZ/2493-ticket-de-caisse-pb-de-cache) **\ud83e\udd75 Retour de test**\n - *:bug: fix: reset receipt cache between export Messenger messages* [\\#7791](https://github.com/Wishibam/Marketplace-api/pull/7791)\n - [\ud83d\ude84 Commande exp\u00e9di\u00e9e : l'interface part trop vite et garde l'ancien statut](https://trello.com/c/6QmFnpyb/2418-%F0%9F%9A%84-commande-exp%C3%A9di%C3%A9e-linterface-part-trop-vite-et-garde-lancien-statut) **In review WMS**\n - *:sparkles: OMS order, add \"inProcessing\" flag* [\\#7797](https://github.com/Wishibam/Marketplace-api/pull/7797)\n - [MP - Sur le marchand (listing & d\u00e9tails), mettre un lien qui redirige directement vers le marchand en front](https://trello.com/c/Z136lbnm/1296-mp-sur-le-marchand-listing-d%C3%A9tails-mettre-un-lien-qui-redirige-directement-vers-le-marchand-en-front) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n - *:sparkles: Add retailer eshop link* [\\#7822](https://github.com/Wishibam/Marketplace-api/pull/7822)\n - [Tag - Ajout du champ \"Visibilit\u00e9\" c\u00f4t\u00e9 MP](https://trello.com/c/zPFP31T9/2398-tag-ajout-du-champ-visibilit%C3%A9-c%C3%B4t%C3%A9-mp) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n - *:sparkles: Add tag visibility field to retailer corner and category* [\\#7831](https://github.com/Wishibam/Marketplace-api/pull/7831)\n - [Nouvelle vue Enseigne -Partie 1-](https://trello.com/c/AVsRvxLu/2494-nouvelle-vue-enseigne-partie-1) **\ud83e\udd73Testing**\n - *:sparkles: OMS New enseigne view (front only) no interaction* [\\#7846](https://github.com/Wishibam/Marketplace-api/pull/7846)\n \n- **Misc**\n - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n - *:bug: WMS Log Message Container identifier* [\\#7810](https://github.com/Wishibam/Marketplace-api/pull/7810)\n - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n - *feat(mcp): add MCP server walking skeleton with list\\_organizations* [\\#7823](https://github.com/Wishibam/Marketplace-api/pull/7823)\n - *refactor(mcp): extract logic from ImportAction, RetailerNormalizer and RankProduct* [\\#7824](https://github.com/Wishibam/Marketplace-api/pull/7824)\n - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n - *feat(merchandising): actions de masse asynchrones avec lock par organisation* [\\#7828](https://github.com/Wishibam/Marketplace-api/pull/7828)\n - *Merge feat/mcp-walking-skeleton (simulate #7823 merge)* [\\#7832](https://github.com/Wishibam/Marketplace-api/pull/7832)\n - *feat(product-list): pipeline batch pour les actions de masse des listes produits* [\\#7833](https://github.com/Wishibam/Marketplace-api/pull/7833)\n - *feat(mcp): Add OAuth discovery* [\\#7834](https://github.com/Wishibam/Marketplace-api/pull/7834)\n - *:arrow\\_up: deps: bump mcp/sdk to 0.7.1 (CVE-2026-53965)* [\\#7838](https://github.com/Wishibam/Marketplace-api/pull/7838)\n - *:bug: fix: guard against null option name/value in CSV export* [\\#7841](https://github.com/Wishibam/Marketplace-api/pull/7841)\n - *:bug: fix: stream line item CSV export to fix memory exhaustion* [\\#7842](https://github.com/Wishibam/Marketplace-api/pull/7842)\n - *:arrow\\_up: deps: patch sodium\\_compat Ed25519 key validation vulnerability* [\\#7843](https://github.com/Wishibam/Marketplace-api/pull/7843)\n - *fix: attribut required category* [\\#7851](https://github.com/Wishibam/Marketplace-api/pull/7851)\n \n- **D\u00e9j\u00e0 en production**\n - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n - *feat: allow max product variation at 380* [\\#7829](https://github.com/Wishibam/Marketplace-api/pull/7829)\n - *:bug: fix: stop gating unmapped counters on product validity* [\\#7835](https://github.com/Wishibam/Marketplace-api/pull/7835)\n - *:bug: fix: repair missing-mapping counters behind the retailer list icon* [\\#7837](https://github.com/Wishibam/Marketplace-api/pull/7837)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n V\u00e9rifier :\n curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n\n### [PR #7828](https://github.com/Wishibam/Marketplace-api/pull/7828) \u2014 feat(merchandising): actions de masse asynchrones avec lock par organisation\n\n - ansible en prod \u00e7a https://github.com/Wishibam/Infrastructure/pull/467\n", "creation_timestamp": "2026-08-24T09:02:40.054168Z"} {"uuid": "7a78e6e4-eb8a-4b78-8838-2a9e793e2e4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53965", "type": "seen", "source": "https://gist.github.com/FR-Flo/05ac136c9c9ce0232c5ef40f4fb2c11f", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Trello**\n - [Attributs required par cat\u00e9gorie](https://trello.com/c/2loCszpt/1854-attributs-required-par-cat%C3%A9gorie) **\ud83e\udd73Testing**\n - *Feat: Makes attributes required or not per categories* [\\#7474](https://github.com/Wishibam/Marketplace-api/pull/7474)\n - [\ud83d\udfe2 Int\u00e9gration des fanions promotionnels \u2014 Ajout image au tag de taxon (MP) (\u00e9volution n\u00b011)](https://trello.com/c/fNNkiR1c/2405-%F0%9F%9F%A2-int%C3%A9gration-des-fanions-promotionnels-ajout-image-au-tag-de-taxon-mp-%C3%A9volution-n11) **\ud83e\udd75 Retour de test**\n - *:sparkles: feat: fanions de taxon \u2014 images desktop/mobile (MP-api)* [\\#7617](https://github.com/Wishibam/Marketplace-api/pull/7617)\n - [MP - Cr\u00e9ation / modification m\u00e9thode de livraison - impossible de save](https://trello.com/c/Ud1DRxgj/2407-mp-cr%C3%A9ation-modification-m%C3%A9thode-de-livraison-impossible-de-save) **\ud83e\udd75 Retour de test**\n - *:bug: MP Fix Dpd class, file and discriminator name* [\\#7757](https://github.com/Wishibam/Marketplace-api/pull/7757)\n - [Ticket de caisse - pb de cache](https://trello.com/c/EwgktbXZ/2493-ticket-de-caisse-pb-de-cache) **\ud83e\udd75 Retour de test**\n - *:bug: fix: reset receipt cache between export Messenger messages* [\\#7791](https://github.com/Wishibam/Marketplace-api/pull/7791)\n - [\ud83d\ude84 Commande exp\u00e9di\u00e9e : l'interface part trop vite et garde l'ancien statut](https://trello.com/c/6QmFnpyb/2418-%F0%9F%9A%84-commande-exp%C3%A9di%C3%A9e-linterface-part-trop-vite-et-garde-lancien-statut) **In review WMS**\n - *:sparkles: OMS order, add \"inProcessing\" flag* [\\#7797](https://github.com/Wishibam/Marketplace-api/pull/7797)\n - [MP - Sur le marchand (listing & d\u00e9tails), mettre un lien qui redirige directement vers le marchand en front](https://trello.com/c/Z136lbnm/1296-mp-sur-le-marchand-listing-d%C3%A9tails-mettre-un-lien-qui-redirige-directement-vers-le-marchand-en-front) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n - *:sparkles: Add retailer eshop link* [\\#7822](https://github.com/Wishibam/Marketplace-api/pull/7822)\n - [Tag - Ajout du champ \"Visibilit\u00e9\" c\u00f4t\u00e9 MP](https://trello.com/c/zPFP31T9/2398-tag-ajout-du-champ-visibilit%C3%A9-c%C3%B4t%C3%A9-mp) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n - *:sparkles: Add tag visibility field to retailer corner and category* [\\#7831](https://github.com/Wishibam/Marketplace-api/pull/7831)\n - [Nouvelle vue Enseigne -Partie 1-](https://trello.com/c/AVsRvxLu/2494-nouvelle-vue-enseigne-partie-1) **\ud83e\udd73Testing**\n - *:sparkles: OMS New enseigne view (front only) no interaction* [\\#7846](https://github.com/Wishibam/Marketplace-api/pull/7846)\n \n- **Misc**\n - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n - *:bug: WMS Log Message Container identifier* [\\#7810](https://github.com/Wishibam/Marketplace-api/pull/7810)\n - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n - *feat(mcp): add MCP server walking skeleton with list\\_organizations* [\\#7823](https://github.com/Wishibam/Marketplace-api/pull/7823)\n - *refactor(mcp): extract logic from ImportAction, RetailerNormalizer and RankProduct* [\\#7824](https://github.com/Wishibam/Marketplace-api/pull/7824)\n - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n - *feat(merchandising): actions de masse asynchrones avec lock par organisation* [\\#7828](https://github.com/Wishibam/Marketplace-api/pull/7828)\n - *Merge feat/mcp-walking-skeleton (simulate #7823 merge)* [\\#7832](https://github.com/Wishibam/Marketplace-api/pull/7832)\n - *feat(product-list): pipeline batch pour les actions de masse des listes produits* [\\#7833](https://github.com/Wishibam/Marketplace-api/pull/7833)\n - *feat(mcp): Add OAuth discovery* [\\#7834](https://github.com/Wishibam/Marketplace-api/pull/7834)\n - *:arrow\\_up: deps: bump mcp/sdk to 0.7.1 (CVE-2026-53965)* [\\#7838](https://github.com/Wishibam/Marketplace-api/pull/7838)\n - *:bug: fix: guard against null option name/value in CSV export* [\\#7841](https://github.com/Wishibam/Marketplace-api/pull/7841)\n - *:bug: fix: stream line item CSV export to fix memory exhaustion* [\\#7842](https://github.com/Wishibam/Marketplace-api/pull/7842)\n - *:arrow\\_up: deps: patch sodium\\_compat Ed25519 key validation vulnerability* [\\#7843](https://github.com/Wishibam/Marketplace-api/pull/7843)\n - *fix: attribut required category* [\\#7851](https://github.com/Wishibam/Marketplace-api/pull/7851)\n \n- **D\u00e9j\u00e0 en production**\n - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n - *feat: allow max product variation at 380* [\\#7829](https://github.com/Wishibam/Marketplace-api/pull/7829)\n - *:bug: fix: stop gating unmapped counters on product validity* [\\#7835](https://github.com/Wishibam/Marketplace-api/pull/7835)\n - *:bug: fix: repair missing-mapping counters behind the retailer list icon* [\\#7837](https://github.com/Wishibam/Marketplace-api/pull/7837)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n V\u00e9rifier :\n curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n\n### [PR #7828](https://github.com/Wishibam/Marketplace-api/pull/7828) \u2014 feat(merchandising): actions de masse asynchrones avec lock par organisation\n\n - ansible en prod \u00e7a https://github.com/Wishibam/Infrastructure/pull/467\n", "creation_timestamp": "2026-08-24T09:02:40.054168Z"} https://vulnerability.circl.lu/sighting/7a78e6e4-eb8a-4b78-8838-2a9e793e2e4d/export Mon, 24 Aug 2026 09:02:40 +0000 https://vulnerability.circl.lu/sighting/204f4abd-7aee-4af7-97bd-8c060f4f2e26/export {"uuid": "204f4abd-7aee-4af7-97bd-8c060f4f2e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53965", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mthyn6374w2o", "content": "MCP PHP SDK: the HTTP client transport appends each 4 KiB SSE chunk to an unbounded in-memory buffer, flushed only when the event delimiter arrives. A remote server that withholds it drives the client to OOM. CVE-2026-53965 \u2014 the trust boundary runs toward the server. #dev", "creation_timestamp": "2026-08-20T00:32:07.037905Z"} {"uuid": "204f4abd-7aee-4af7-97bd-8c060f4f2e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53965", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mthyn6374w2o", "content": "MCP PHP SDK: the HTTP client transport appends each 4 KiB SSE chunk to an unbounded in-memory buffer, flushed only when the event delimiter arrives. A remote server that withholds it drives the client to OOM. CVE-2026-53965 \u2014 the trust boundary runs toward the server. #dev", "creation_timestamp": "2026-08-20T00:32:07.037905Z"} https://vulnerability.circl.lu/sighting/204f4abd-7aee-4af7-97bd-8c060f4f2e26/export Thu, 20 Aug 2026 00:32:07 +0000 https://vulnerability.circl.lu/sighting/c1689a94-10b1-43fd-96b7-923eb64a61c5/export {"uuid": "c1689a94-10b1-43fd-96b7-923eb64a61c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53965", "type": "published-proof-of-concept", "source": "https://github.com/modelcontextprotocol/php-sdk/security/advisories/GHSA-7m52-jw36-44r3", "content": "", "creation_timestamp": "2026-08-19T20:35:12.955316Z"} {"uuid": "c1689a94-10b1-43fd-96b7-923eb64a61c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53965", "type": "published-proof-of-concept", "source": "https://github.com/modelcontextprotocol/php-sdk/security/advisories/GHSA-7m52-jw36-44r3", "content": "", "creation_timestamp": "2026-08-19T20:35:12.955316Z"} https://vulnerability.circl.lu/sighting/c1689a94-10b1-43fd-96b7-923eb64a61c5/export Wed, 19 Aug 2026 20:35:12 +0000 https://vulnerability.circl.lu/sighting/e3db15f8-ba7c-4e04-bc42-7a98f2d697ff/export {"uuid": "e3db15f8-ba7c-4e04-bc42-7a98f2d697ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53965", "type": "seen", "source": "https://gist.github.com/FR-Flo/0e7f5508a7e506b113c6aa2e60563426", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Trello**\n - [Attributs required par cat\u00e9gorie](https://trello.com/c/2loCszpt/1854-attributs-required-par-cat%C3%A9gorie) **\ud83e\udd73Testing**\n - *Feat: Makes attributes required or not per categories* [\\#7474](https://github.com/Wishibam/Marketplace-api/pull/7474)\n - [\ud83d\udfe2 Int\u00e9gration des fanions promotionnels \u2014 Ajout image au tag de taxon (MP) (\u00e9volution n\u00b011)](https://trello.com/c/fNNkiR1c/2405-%F0%9F%9F%A2-int%C3%A9gration-des-fanions-promotionnels-ajout-image-au-tag-de-taxon-mp-%C3%A9volution-n11) **\ud83e\udd75 Retour de test**\n - *:sparkles: feat: fanions de taxon \u2014 images desktop/mobile (MP-api)* [\\#7617](https://github.com/Wishibam/Marketplace-api/pull/7617)\n - [MP - Cr\u00e9ation / modification m\u00e9thode de livraison - impossible de save](https://trello.com/c/Ud1DRxgj/2407-mp-cr%C3%A9ation-modification-m%C3%A9thode-de-livraison-impossible-de-save) **\ud83e\udd75 Retour de test**\n - *:bug: MP Fix Dpd class, file and discriminator name* [\\#7757](https://github.com/Wishibam/Marketplace-api/pull/7757)\n - [Ticket de caisse - pb de cache](https://trello.com/c/EwgktbXZ/2493-ticket-de-caisse-pb-de-cache) **\ud83e\udd73Testing**\n - *:bug: fix: reset receipt cache between export Messenger messages* [\\#7791](https://github.com/Wishibam/Marketplace-api/pull/7791)\n - [\ud83d\ude84 Commande exp\u00e9di\u00e9e : l'interface part trop vite et garde l'ancien statut](https://trello.com/c/6QmFnpyb/2418-%F0%9F%9A%84-commande-exp%C3%A9di%C3%A9e-linterface-part-trop-vite-et-garde-lancien-statut) **\ud83e\udd75 Retour de test**\n - *:sparkles: OMS order, add \"inProcessing\" flag* [\\#7797](https://github.com/Wishibam/Marketplace-api/pull/7797)\n - [MP - Sur le marchand (listing & d\u00e9tails), mettre un lien qui redirige directement vers le marchand en front](https://trello.com/c/Z136lbnm/1296-mp-sur-le-marchand-listing-d%C3%A9tails-mettre-un-lien-qui-redirige-directement-vers-le-marchand-en-front) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n - *:sparkles: Add retailer eshop link* [\\#7822](https://github.com/Wishibam/Marketplace-api/pull/7822)\n - [Tag - Ajout du champ \"Visibilit\u00e9\" c\u00f4t\u00e9 MP](https://trello.com/c/zPFP31T9/2398-tag-ajout-du-champ-visibilit%C3%A9-c%C3%B4t%C3%A9-mp) **\ud83e\udd73Testing**\n - *:sparkles: Add tag visibility field to retailer corner and category* [\\#7831](https://github.com/Wishibam/Marketplace-api/pull/7831)\n \n- **Misc**\n - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n - *:bug: WMS Log Message Container identifier* [\\#7810](https://github.com/Wishibam/Marketplace-api/pull/7810)\n - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n - *feat(mcp): add MCP server walking skeleton with list\\_organizations* [\\#7823](https://github.com/Wishibam/Marketplace-api/pull/7823)\n - *refactor(mcp): extract logic from ImportAction, RetailerNormalizer and RankProduct* [\\#7824](https://github.com/Wishibam/Marketplace-api/pull/7824)\n - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n - *feat(merchandising): actions de masse asynchrones avec lock par organisation* [\\#7828](https://github.com/Wishibam/Marketplace-api/pull/7828)\n - *Merge feat/mcp-walking-skeleton (simulate #7823 merge)* [\\#7832](https://github.com/Wishibam/Marketplace-api/pull/7832)\n - *feat(product-list): pipeline batch pour les actions de masse des listes produits* [\\#7833](https://github.com/Wishibam/Marketplace-api/pull/7833)\n - *feat(mcp): Add OAuth discovery* [\\#7834](https://github.com/Wishibam/Marketplace-api/pull/7834)\n - *:arrow\\_up: deps: bump mcp/sdk to 0.7.1 (CVE-2026-53965)* [\\#7838](https://github.com/Wishibam/Marketplace-api/pull/7838)\n - *:bug: fix: guard against null option name/value in CSV export* [\\#7841](https://github.com/Wishibam/Marketplace-api/pull/7841)\n - *:bug: fix: stream line item CSV export to fix memory exhaustion* [\\#7842](https://github.com/Wishibam/Marketplace-api/pull/7842)\n - *:arrow\\_up: deps: patch sodium\\_compat Ed25519 key validation vulnerability* [\\#7843](https://github.com/Wishibam/Marketplace-api/pull/7843)\n \n- **D\u00e9j\u00e0 en production**\n - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n - *feat: allow max product variation at 380* [\\#7829](https://github.com/Wishibam/Marketplace-api/pull/7829)\n - *:bug: fix: stop gating unmapped counters on product validity* [\\#7835](https://github.com/Wishibam/Marketplace-api/pull/7835)\n - *:bug: fix: repair missing-mapping counters behind the retailer list icon* [\\#7837](https://github.com/Wishibam/Marketplace-api/pull/7837)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n V\u00e9rifier :\n curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n\n### [PR #7828](https://github.com/Wishibam/Marketplace-api/pull/7828) \u2014 feat(merchandising): actions de masse asynchrones avec lock par organisation\n\n - ansible en prod \u00e7a https://github.com/Wishibam/Infrastructure/pull/467\n", "creation_timestamp": "2026-08-19T13:18:57.865970Z"} {"uuid": "e3db15f8-ba7c-4e04-bc42-7a98f2d697ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53965", "type": "seen", "source": "https://gist.github.com/FR-Flo/0e7f5508a7e506b113c6aa2e60563426", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Trello**\n - [Attributs required par cat\u00e9gorie](https://trello.com/c/2loCszpt/1854-attributs-required-par-cat%C3%A9gorie) **\ud83e\udd73Testing**\n - *Feat: Makes attributes required or not per categories* [\\#7474](https://github.com/Wishibam/Marketplace-api/pull/7474)\n - [\ud83d\udfe2 Int\u00e9gration des fanions promotionnels \u2014 Ajout image au tag de taxon (MP) (\u00e9volution n\u00b011)](https://trello.com/c/fNNkiR1c/2405-%F0%9F%9F%A2-int%C3%A9gration-des-fanions-promotionnels-ajout-image-au-tag-de-taxon-mp-%C3%A9volution-n11) **\ud83e\udd75 Retour de test**\n - *:sparkles: feat: fanions de taxon \u2014 images desktop/mobile (MP-api)* [\\#7617](https://github.com/Wishibam/Marketplace-api/pull/7617)\n - [MP - Cr\u00e9ation / modification m\u00e9thode de livraison - impossible de save](https://trello.com/c/Ud1DRxgj/2407-mp-cr%C3%A9ation-modification-m%C3%A9thode-de-livraison-impossible-de-save) **\ud83e\udd75 Retour de test**\n - *:bug: MP Fix Dpd class, file and discriminator name* [\\#7757](https://github.com/Wishibam/Marketplace-api/pull/7757)\n - [Ticket de caisse - pb de cache](https://trello.com/c/EwgktbXZ/2493-ticket-de-caisse-pb-de-cache) **\ud83e\udd73Testing**\n - *:bug: fix: reset receipt cache between export Messenger messages* [\\#7791](https://github.com/Wishibam/Marketplace-api/pull/7791)\n - [\ud83d\ude84 Commande exp\u00e9di\u00e9e : l'interface part trop vite et garde l'ancien statut](https://trello.com/c/6QmFnpyb/2418-%F0%9F%9A%84-commande-exp%C3%A9di%C3%A9e-linterface-part-trop-vite-et-garde-lancien-statut) **\ud83e\udd75 Retour de test**\n - *:sparkles: OMS order, add \"inProcessing\" flag* [\\#7797](https://github.com/Wishibam/Marketplace-api/pull/7797)\n - [MP - Sur le marchand (listing & d\u00e9tails), mettre un lien qui redirige directement vers le marchand en front](https://trello.com/c/Z136lbnm/1296-mp-sur-le-marchand-listing-d%C3%A9tails-mettre-un-lien-qui-redirige-directement-vers-le-marchand-en-front) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n - *:sparkles: Add retailer eshop link* [\\#7822](https://github.com/Wishibam/Marketplace-api/pull/7822)\n - [Tag - Ajout du champ \"Visibilit\u00e9\" c\u00f4t\u00e9 MP](https://trello.com/c/zPFP31T9/2398-tag-ajout-du-champ-visibilit%C3%A9-c%C3%B4t%C3%A9-mp) **\ud83e\udd73Testing**\n - *:sparkles: Add tag visibility field to retailer corner and category* [\\#7831](https://github.com/Wishibam/Marketplace-api/pull/7831)\n \n- **Misc**\n - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n - *:bug: WMS Log Message Container identifier* [\\#7810](https://github.com/Wishibam/Marketplace-api/pull/7810)\n - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n - *feat(mcp): add MCP server walking skeleton with list\\_organizations* [\\#7823](https://github.com/Wishibam/Marketplace-api/pull/7823)\n - *refactor(mcp): extract logic from ImportAction, RetailerNormalizer and RankProduct* [\\#7824](https://github.com/Wishibam/Marketplace-api/pull/7824)\n - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n - *feat(merchandising): actions de masse asynchrones avec lock par organisation* [\\#7828](https://github.com/Wishibam/Marketplace-api/pull/7828)\n - *Merge feat/mcp-walking-skeleton (simulate #7823 merge)* [\\#7832](https://github.com/Wishibam/Marketplace-api/pull/7832)\n - *feat(product-list): pipeline batch pour les actions de masse des listes produits* [\\#7833](https://github.com/Wishibam/Marketplace-api/pull/7833)\n - *feat(mcp): Add OAuth discovery* [\\#7834](https://github.com/Wishibam/Marketplace-api/pull/7834)\n - *:arrow\\_up: deps: bump mcp/sdk to 0.7.1 (CVE-2026-53965)* [\\#7838](https://github.com/Wishibam/Marketplace-api/pull/7838)\n - *:bug: fix: guard against null option name/value in CSV export* [\\#7841](https://github.com/Wishibam/Marketplace-api/pull/7841)\n - *:bug: fix: stream line item CSV export to fix memory exhaustion* [\\#7842](https://github.com/Wishibam/Marketplace-api/pull/7842)\n - *:arrow\\_up: deps: patch sodium\\_compat Ed25519 key validation vulnerability* [\\#7843](https://github.com/Wishibam/Marketplace-api/pull/7843)\n \n- **D\u00e9j\u00e0 en production**\n - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n - *feat: allow max product variation at 380* [\\#7829](https://github.com/Wishibam/Marketplace-api/pull/7829)\n - *:bug: fix: stop gating unmapped counters on product validity* [\\#7835](https://github.com/Wishibam/Marketplace-api/pull/7835)\n - *:bug: fix: repair missing-mapping counters behind the retailer list icon* [\\#7837](https://github.com/Wishibam/Marketplace-api/pull/7837)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n V\u00e9rifier :\n curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n\n### [PR #7828](https://github.com/Wishibam/Marketplace-api/pull/7828) \u2014 feat(merchandising): actions de masse asynchrones avec lock par organisation\n\n - ansible en prod \u00e7a https://github.com/Wishibam/Infrastructure/pull/467\n", "creation_timestamp": "2026-08-19T13:18:57.865970Z"} https://vulnerability.circl.lu/sighting/e3db15f8-ba7c-4e04-bc42-7a98f2d697ff/export Wed, 19 Aug 2026 13:18:57 +0000 https://vulnerability.circl.lu/sighting/c036ccc5-0096-4fb4-a1f1-7145fb6e4809/export {"uuid": "c036ccc5-0096-4fb4-a1f1-7145fb6e4809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53965", "type": "seen", "source": "https://gist.github.com/FR-Flo/a3cc74f208df80c1d7f4b5b3e98e4f77", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Trello**\n - [Attributs required par cat\u00e9gorie](https://trello.com/c/2loCszpt/1854-attributs-required-par-cat%C3%A9gorie) **\u2600\ufe0fIn review**\n - *Feat: Makes attributes required or not per categories* [\\#7474](https://github.com/Wishibam/Marketplace-api/pull/7474)\n - [\ud83d\udfe2 Int\u00e9gration des fanions promotionnels \u2014 Ajout image au tag de taxon (MP) (\u00e9volution n\u00b011)](https://trello.com/c/fNNkiR1c/2405-%F0%9F%9F%A2-int%C3%A9gration-des-fanions-promotionnels-ajout-image-au-tag-de-taxon-mp-%C3%A9volution-n11) **\ud83e\udd75 Retour de test**\n - *:sparkles: feat: fanions de taxon \u2014 images desktop/mobile (MP-api)* [\\#7617](https://github.com/Wishibam/Marketplace-api/pull/7617)\n - [MP - Cr\u00e9ation / modification m\u00e9thode de livraison - impossible de save](https://trello.com/c/Ud1DRxgj/2407-mp-cr%C3%A9ation-modification-m%C3%A9thode-de-livraison-impossible-de-save) **\ud83e\udd75 Retour de test**\n - *:bug: MP Fix Dpd class, file and discriminator name* [\\#7757](https://github.com/Wishibam/Marketplace-api/pull/7757)\n - [\ud83d\ude84 Commande exp\u00e9di\u00e9e : l'interface part trop vite et garde l'ancien statut](https://trello.com/c/6QmFnpyb/2418-%F0%9F%9A%84-commande-exp%C3%A9di%C3%A9e-linterface-part-trop-vite-et-garde-lancien-statut) **\ud83e\udd75 Retour de test**\n - *:sparkles: OMS order, add \"inProcessing\" flag* [\\#7797](https://github.com/Wishibam/Marketplace-api/pull/7797)\n - [MP - Sur le marchand (listing & d\u00e9tails), mettre un lien qui redirige directement vers le marchand en front](https://trello.com/c/Z136lbnm/1296-mp-sur-le-marchand-listing-d%C3%A9tails-mettre-un-lien-qui-redirige-directement-vers-le-marchand-en-front) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n - *:sparkles: Add retailer eshop link* [\\#7822](https://github.com/Wishibam/Marketplace-api/pull/7822)\n - [Tag - Ajout du champ \"Visibilit\u00e9\" c\u00f4t\u00e9 MP](https://trello.com/c/zPFP31T9/2398-tag-ajout-du-champ-visibilit%C3%A9-c%C3%B4t%C3%A9-mp) **\u2600\ufe0fIn review**\n - *:sparkles: Add tag visibility field to retailer corner and category* [\\#7831](https://github.com/Wishibam/Marketplace-api/pull/7831)\n \n- **Misc**\n - *:bug: fix: reset receipt cache between export Messenger messages* [\\#7791](https://github.com/Wishibam/Marketplace-api/pull/7791)\n - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n - *:bug: WMS Log Message Container identifier* [\\#7810](https://github.com/Wishibam/Marketplace-api/pull/7810)\n - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n - *feat(mcp): add MCP server walking skeleton with list\\_organizations* [\\#7823](https://github.com/Wishibam/Marketplace-api/pull/7823)\n - *refactor(mcp): extract logic from ImportAction, RetailerNormalizer and RankProduct* [\\#7824](https://github.com/Wishibam/Marketplace-api/pull/7824)\n - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n - *feat(merchandising): actions de masse asynchrones avec lock par organisation* [\\#7828](https://github.com/Wishibam/Marketplace-api/pull/7828)\n - *Merge feat/mcp-walking-skeleton (simulate #7823 merge)* [\\#7832](https://github.com/Wishibam/Marketplace-api/pull/7832)\n - *feat(product-list): pipeline batch pour les actions de masse des listes produits* [\\#7833](https://github.com/Wishibam/Marketplace-api/pull/7833)\n - *feat(mcp): Add OAuth discovery* [\\#7834](https://github.com/Wishibam/Marketplace-api/pull/7834)\n - *:arrow\\_up: deps: bump mcp/sdk to 0.7.1 (CVE-2026-53965)* [\\#7838](https://github.com/Wishibam/Marketplace-api/pull/7838)\n - *:bug: fix: guard against null option name/value in CSV export* [\\#7841](https://github.com/Wishibam/Marketplace-api/pull/7841)\n \n- **D\u00e9j\u00e0 en production**\n - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n - *feat: allow max product variation at 380* [\\#7829](https://github.com/Wishibam/Marketplace-api/pull/7829)\n - *:bug: fix: stop gating unmapped counters on product validity* [\\#7835](https://github.com/Wishibam/Marketplace-api/pull/7835)\n - *:bug: fix: repair missing-mapping counters behind the retailer list icon* [\\#7837](https://github.com/Wishibam/Marketplace-api/pull/7837)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n V\u00e9rifier :\n curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n\n### [PR #7828](https://github.com/Wishibam/Marketplace-api/pull/7828) \u2014 feat(merchandising): actions de masse asynchrones avec lock par organisation\n\n - ansible en prod \u00e7a https://github.com/Wishibam/Infrastructure/pull/467\n", "creation_timestamp": "2026-08-19T08:25:35.054901Z"} {"uuid": "c036ccc5-0096-4fb4-a1f1-7145fb6e4809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53965", "type": "seen", "source": "https://gist.github.com/FR-Flo/a3cc74f208df80c1d7f4b5b3e98e4f77", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Trello**\n - [Attributs required par cat\u00e9gorie](https://trello.com/c/2loCszpt/1854-attributs-required-par-cat%C3%A9gorie) **\u2600\ufe0fIn review**\n - *Feat: Makes attributes required or not per categories* [\\#7474](https://github.com/Wishibam/Marketplace-api/pull/7474)\n - [\ud83d\udfe2 Int\u00e9gration des fanions promotionnels \u2014 Ajout image au tag de taxon (MP) (\u00e9volution n\u00b011)](https://trello.com/c/fNNkiR1c/2405-%F0%9F%9F%A2-int%C3%A9gration-des-fanions-promotionnels-ajout-image-au-tag-de-taxon-mp-%C3%A9volution-n11) **\ud83e\udd75 Retour de test**\n - *:sparkles: feat: fanions de taxon \u2014 images desktop/mobile (MP-api)* [\\#7617](https://github.com/Wishibam/Marketplace-api/pull/7617)\n - [MP - Cr\u00e9ation / modification m\u00e9thode de livraison - impossible de save](https://trello.com/c/Ud1DRxgj/2407-mp-cr%C3%A9ation-modification-m%C3%A9thode-de-livraison-impossible-de-save) **\ud83e\udd75 Retour de test**\n - *:bug: MP Fix Dpd class, file and discriminator name* [\\#7757](https://github.com/Wishibam/Marketplace-api/pull/7757)\n - [\ud83d\ude84 Commande exp\u00e9di\u00e9e : l'interface part trop vite et garde l'ancien statut](https://trello.com/c/6QmFnpyb/2418-%F0%9F%9A%84-commande-exp%C3%A9di%C3%A9e-linterface-part-trop-vite-et-garde-lancien-statut) **\ud83e\udd75 Retour de test**\n - *:sparkles: OMS order, add \"inProcessing\" flag* [\\#7797](https://github.com/Wishibam/Marketplace-api/pull/7797)\n - [MP - Sur le marchand (listing & d\u00e9tails), mettre un lien qui redirige directement vers le marchand en front](https://trello.com/c/Z136lbnm/1296-mp-sur-le-marchand-listing-d%C3%A9tails-mettre-un-lien-qui-redirige-directement-vers-le-marchand-en-front) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n - *:sparkles: Add retailer eshop link* [\\#7822](https://github.com/Wishibam/Marketplace-api/pull/7822)\n - [Tag - Ajout du champ \"Visibilit\u00e9\" c\u00f4t\u00e9 MP](https://trello.com/c/zPFP31T9/2398-tag-ajout-du-champ-visibilit%C3%A9-c%C3%B4t%C3%A9-mp) **\u2600\ufe0fIn review**\n - *:sparkles: Add tag visibility field to retailer corner and category* [\\#7831](https://github.com/Wishibam/Marketplace-api/pull/7831)\n \n- **Misc**\n - *:bug: fix: reset receipt cache between export Messenger messages* [\\#7791](https://github.com/Wishibam/Marketplace-api/pull/7791)\n - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n - *:bug: WMS Log Message Container identifier* [\\#7810](https://github.com/Wishibam/Marketplace-api/pull/7810)\n - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n - *feat(mcp): add MCP server walking skeleton with list\\_organizations* [\\#7823](https://github.com/Wishibam/Marketplace-api/pull/7823)\n - *refactor(mcp): extract logic from ImportAction, RetailerNormalizer and RankProduct* [\\#7824](https://github.com/Wishibam/Marketplace-api/pull/7824)\n - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n - *feat(merchandising): actions de masse asynchrones avec lock par organisation* [\\#7828](https://github.com/Wishibam/Marketplace-api/pull/7828)\n - *Merge feat/mcp-walking-skeleton (simulate #7823 merge)* [\\#7832](https://github.com/Wishibam/Marketplace-api/pull/7832)\n - *feat(product-list): pipeline batch pour les actions de masse des listes produits* [\\#7833](https://github.com/Wishibam/Marketplace-api/pull/7833)\n - *feat(mcp): Add OAuth discovery* [\\#7834](https://github.com/Wishibam/Marketplace-api/pull/7834)\n - *:arrow\\_up: deps: bump mcp/sdk to 0.7.1 (CVE-2026-53965)* [\\#7838](https://github.com/Wishibam/Marketplace-api/pull/7838)\n - *:bug: fix: guard against null option name/value in CSV export* [\\#7841](https://github.com/Wishibam/Marketplace-api/pull/7841)\n \n- **D\u00e9j\u00e0 en production**\n - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n - *feat: allow max product variation at 380* [\\#7829](https://github.com/Wishibam/Marketplace-api/pull/7829)\n - *:bug: fix: stop gating unmapped counters on product validity* [\\#7835](https://github.com/Wishibam/Marketplace-api/pull/7835)\n - *:bug: fix: repair missing-mapping counters behind the retailer list icon* [\\#7837](https://github.com/Wishibam/Marketplace-api/pull/7837)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n V\u00e9rifier :\n curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n\n### [PR #7828](https://github.com/Wishibam/Marketplace-api/pull/7828) \u2014 feat(merchandising): actions de masse asynchrones avec lock par organisation\n\n - ansible en prod \u00e7a https://github.com/Wishibam/Infrastructure/pull/467\n", "creation_timestamp": "2026-08-19T08:25:35.054901Z"} https://vulnerability.circl.lu/sighting/c036ccc5-0096-4fb4-a1f1-7145fb6e4809/export Wed, 19 Aug 2026 08:25:35 +0000 https://vulnerability.circl.lu/sighting/959d23a0-fc2a-42bd-a18e-fca71e8a699d/export {"uuid": "959d23a0-fc2a-42bd-a18e-fca71e8a699d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53965", "type": "seen", "source": "https://gist.github.com/FR-Flo/a82f37135301a238c85c6769b4acc044", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Trello**\n - [\ud83d\udfe2 Int\u00e9gration des fanions promotionnels \u2014 Ajout image au tag de taxon (MP) (\u00e9volution n\u00b011)](https://trello.com/c/fNNkiR1c/2405-%F0%9F%9F%A2-int%C3%A9gration-des-fanions-promotionnels-ajout-image-au-tag-de-taxon-mp-%C3%A9volution-n11) **\ud83e\udd75 Retour de test**\n - *:sparkles: feat: fanions de taxon \u2014 images desktop/mobile (MP-api)* [\\#7617](https://github.com/Wishibam/Marketplace-api/pull/7617)\n - [MP - Cr\u00e9ation / modification m\u00e9thode de livraison - impossible de save](https://trello.com/c/Ud1DRxgj/2407-mp-cr%C3%A9ation-modification-m%C3%A9thode-de-livraison-impossible-de-save) **\ud83e\udd75 Retour de test**\n - *:bug: MP Fix Dpd class, file and discriminator name* [\\#7757](https://github.com/Wishibam/Marketplace-api/pull/7757)\n - [\ud83d\ude84 Commande exp\u00e9di\u00e9e : l'interface part trop vite et garde l'ancien statut](https://trello.com/c/6QmFnpyb/2418-%F0%9F%9A%84-commande-exp%C3%A9di%C3%A9e-linterface-part-trop-vite-et-garde-lancien-statut) **\ud83e\udd75 Retour de test**\n - *:sparkles: OMS order, add \"inProcessing\" flag* [\\#7797](https://github.com/Wishibam/Marketplace-api/pull/7797)\n - [MP - Sur le marchand (listing & d\u00e9tails), mettre un lien qui redirige directement vers le marchand en front](https://trello.com/c/Z136lbnm/1296-mp-sur-le-marchand-listing-d%C3%A9tails-mettre-un-lien-qui-redirige-directement-vers-le-marchand-en-front) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n - *:sparkles: Add retailer eshop link* [\\#7822](https://github.com/Wishibam/Marketplace-api/pull/7822)\n - [Tag - Ajout du champ \"Visibilit\u00e9\" c\u00f4t\u00e9 MP](https://trello.com/c/zPFP31T9/2398-tag-ajout-du-champ-visibilit%C3%A9-c%C3%B4t%C3%A9-mp) **\u2600\ufe0fIn review**\n - *:sparkles: Add tag visibility field to retailer corner and category* [\\#7831](https://github.com/Wishibam/Marketplace-api/pull/7831)\n \n- **Misc**\n - *:bug: fix: reset receipt cache between export Messenger messages* [\\#7791](https://github.com/Wishibam/Marketplace-api/pull/7791)\n - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n - *:bug: WMS Log Message Container identifier* [\\#7810](https://github.com/Wishibam/Marketplace-api/pull/7810)\n - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n - *feat(mcp): add MCP server walking skeleton with list\\_organizations* [\\#7823](https://github.com/Wishibam/Marketplace-api/pull/7823)\n - *refactor(mcp): extract logic from ImportAction, RetailerNormalizer and RankProduct* [\\#7824](https://github.com/Wishibam/Marketplace-api/pull/7824)\n - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n - *feat(merchandising): actions de masse asynchrones avec lock par organisation* [\\#7828](https://github.com/Wishibam/Marketplace-api/pull/7828)\n - *Merge feat/mcp-walking-skeleton (simulate #7823 merge)* [\\#7832](https://github.com/Wishibam/Marketplace-api/pull/7832)\n - *feat(product-list): pipeline batch pour les actions de masse des listes produits* [\\#7833](https://github.com/Wishibam/Marketplace-api/pull/7833)\n - *feat(mcp): Add OAuth discovery* [\\#7834](https://github.com/Wishibam/Marketplace-api/pull/7834)\n - *:arrow\\_up: deps: bump mcp/sdk to 0.7.1 (CVE-2026-53965)* [\\#7838](https://github.com/Wishibam/Marketplace-api/pull/7838)\n - *:bug: fix: guard against null option name/value in CSV export* [\\#7841](https://github.com/Wishibam/Marketplace-api/pull/7841)\n \n- **D\u00e9j\u00e0 en production**\n - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n - *feat: allow max product variation at 380* [\\#7829](https://github.com/Wishibam/Marketplace-api/pull/7829)\n - *:bug: fix: stop gating unmapped counters on product validity* [\\#7835](https://github.com/Wishibam/Marketplace-api/pull/7835)\n - *:bug: fix: repair missing-mapping counters behind the retailer list icon* [\\#7837](https://github.com/Wishibam/Marketplace-api/pull/7837)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n V\u00e9rifier :\n curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n\n### [PR #7828](https://github.com/Wishibam/Marketplace-api/pull/7828) \u2014 feat(merchandising): actions de masse asynchrones avec lock par organisation\n\n - ansible en prod \u00e7a https://github.com/Wishibam/Infrastructure/pull/467\n", "creation_timestamp": "2026-08-19T08:01:24.232399Z"} {"uuid": "959d23a0-fc2a-42bd-a18e-fca71e8a699d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53965", "type": "seen", "source": "https://gist.github.com/FR-Flo/a82f37135301a238c85c6769b4acc044", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Trello**\n - [\ud83d\udfe2 Int\u00e9gration des fanions promotionnels \u2014 Ajout image au tag de taxon (MP) (\u00e9volution n\u00b011)](https://trello.com/c/fNNkiR1c/2405-%F0%9F%9F%A2-int%C3%A9gration-des-fanions-promotionnels-ajout-image-au-tag-de-taxon-mp-%C3%A9volution-n11) **\ud83e\udd75 Retour de test**\n - *:sparkles: feat: fanions de taxon \u2014 images desktop/mobile (MP-api)* [\\#7617](https://github.com/Wishibam/Marketplace-api/pull/7617)\n - [MP - Cr\u00e9ation / modification m\u00e9thode de livraison - impossible de save](https://trello.com/c/Ud1DRxgj/2407-mp-cr%C3%A9ation-modification-m%C3%A9thode-de-livraison-impossible-de-save) **\ud83e\udd75 Retour de test**\n - *:bug: MP Fix Dpd class, file and discriminator name* [\\#7757](https://github.com/Wishibam/Marketplace-api/pull/7757)\n - [\ud83d\ude84 Commande exp\u00e9di\u00e9e : l'interface part trop vite et garde l'ancien statut](https://trello.com/c/6QmFnpyb/2418-%F0%9F%9A%84-commande-exp%C3%A9di%C3%A9e-linterface-part-trop-vite-et-garde-lancien-statut) **\ud83e\udd75 Retour de test**\n - *:sparkles: OMS order, add \"inProcessing\" flag* [\\#7797](https://github.com/Wishibam/Marketplace-api/pull/7797)\n - [MP - Sur le marchand (listing & d\u00e9tails), mettre un lien qui redirige directement vers le marchand en front](https://trello.com/c/Z136lbnm/1296-mp-sur-le-marchand-listing-d%C3%A9tails-mettre-un-lien-qui-redirige-directement-vers-le-marchand-en-front) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n - *:sparkles: Add retailer eshop link* [\\#7822](https://github.com/Wishibam/Marketplace-api/pull/7822)\n - [Tag - Ajout du champ \"Visibilit\u00e9\" c\u00f4t\u00e9 MP](https://trello.com/c/zPFP31T9/2398-tag-ajout-du-champ-visibilit%C3%A9-c%C3%B4t%C3%A9-mp) **\u2600\ufe0fIn review**\n - *:sparkles: Add tag visibility field to retailer corner and category* [\\#7831](https://github.com/Wishibam/Marketplace-api/pull/7831)\n \n- **Misc**\n - *:bug: fix: reset receipt cache between export Messenger messages* [\\#7791](https://github.com/Wishibam/Marketplace-api/pull/7791)\n - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n - *:bug: WMS Log Message Container identifier* [\\#7810](https://github.com/Wishibam/Marketplace-api/pull/7810)\n - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n - *feat(mcp): add MCP server walking skeleton with list\\_organizations* [\\#7823](https://github.com/Wishibam/Marketplace-api/pull/7823)\n - *refactor(mcp): extract logic from ImportAction, RetailerNormalizer and RankProduct* [\\#7824](https://github.com/Wishibam/Marketplace-api/pull/7824)\n - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n - *feat(merchandising): actions de masse asynchrones avec lock par organisation* [\\#7828](https://github.com/Wishibam/Marketplace-api/pull/7828)\n - *Merge feat/mcp-walking-skeleton (simulate #7823 merge)* [\\#7832](https://github.com/Wishibam/Marketplace-api/pull/7832)\n - *feat(product-list): pipeline batch pour les actions de masse des listes produits* [\\#7833](https://github.com/Wishibam/Marketplace-api/pull/7833)\n - *feat(mcp): Add OAuth discovery* [\\#7834](https://github.com/Wishibam/Marketplace-api/pull/7834)\n - *:arrow\\_up: deps: bump mcp/sdk to 0.7.1 (CVE-2026-53965)* [\\#7838](https://github.com/Wishibam/Marketplace-api/pull/7838)\n - *:bug: fix: guard against null option name/value in CSV export* [\\#7841](https://github.com/Wishibam/Marketplace-api/pull/7841)\n \n- **D\u00e9j\u00e0 en production**\n - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n - *feat: allow max product variation at 380* [\\#7829](https://github.com/Wishibam/Marketplace-api/pull/7829)\n - *:bug: fix: stop gating unmapped counters on product validity* [\\#7835](https://github.com/Wishibam/Marketplace-api/pull/7835)\n - *:bug: fix: repair missing-mapping counters behind the retailer list icon* [\\#7837](https://github.com/Wishibam/Marketplace-api/pull/7837)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n V\u00e9rifier :\n curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n\n### [PR #7828](https://github.com/Wishibam/Marketplace-api/pull/7828) \u2014 feat(merchandising): actions de masse asynchrones avec lock par organisation\n\n - ansible en prod \u00e7a https://github.com/Wishibam/Infrastructure/pull/467\n", "creation_timestamp": "2026-08-19T08:01:24.232399Z"} https://vulnerability.circl.lu/sighting/959d23a0-fc2a-42bd-a18e-fca71e8a699d/export Wed, 19 Aug 2026 08:01:24 +0000