https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 14:52:35 +0000 https://vulnerability.circl.lu/sighting/a227d465-1db5-4e80-a6a6-d78d16d168ea/export {"uuid": "a227d465-1db5-4e80-a6a6-d78d16d168ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-76846", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-xjw5-q542-3vmr", "content": "", "creation_timestamp": "2026-09-17T22:35:30.570341Z"} {"uuid": "a227d465-1db5-4e80-a6a6-d78d16d168ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-76846", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-xjw5-q542-3vmr", "content": "", "creation_timestamp": "2026-09-17T22:35:30.570341Z"} https://vulnerability.circl.lu/sighting/a227d465-1db5-4e80-a6a6-d78d16d168ea/export Thu, 17 Sep 2026 22:35:30 +0000 https://vulnerability.circl.lu/sighting/7a29d26e-80d1-4420-bd84-0f68ef5cac81/export {"uuid": "7a29d26e-80d1-4420-bd84-0f68ef5cac81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76844", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mum5duzvtc2z", "content": "CVE-2026-76844 for webpack-dev-middleware was published by VulnCheck without coordinating with the maintainers or the OpenJS Foundation CNA, which holds CNA scope for webpack, and before any fix existed.\n\nThe coordinated advisory and fix are now out\ngithub.com/webpack/webp...", "creation_timestamp": "2026-09-03T09:32:16.953760Z"} {"uuid": "7a29d26e-80d1-4420-bd84-0f68ef5cac81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76844", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mum5duzvtc2z", "content": "CVE-2026-76844 for webpack-dev-middleware was published by VulnCheck without coordinating with the maintainers or the OpenJS Foundation CNA, which holds CNA scope for webpack, and before any fix existed.\n\nThe coordinated advisory and fix are now out\ngithub.com/webpack/webp...", "creation_timestamp": "2026-09-03T09:32:16.953760Z"} https://vulnerability.circl.lu/sighting/7a29d26e-80d1-4420-bd84-0f68ef5cac81/export Thu, 03 Sep 2026 09:32:16 +0000 https://vulnerability.circl.lu/sighting/317e7177-d963-4af7-a409-28ab933a9730/export {"uuid": "317e7177-d963-4af7-a409-28ab933a9730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76847", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtv32okhsi2e", "content": "CVE-2026-76847\nWhen the act tool runs a workflow that uses the upload\u2011artifact or download\u2011artifact actions, it starts a small server that handles those files. Because the server does not verify who is making the request and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T05:20:04.083336Z"} {"uuid": "317e7177-d963-4af7-a409-28ab933a9730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76847", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtv32okhsi2e", "content": "CVE-2026-76847\nWhen the act tool runs a workflow that uses the upload\u2011artifact or download\u2011artifact actions, it starts a small server that handles those files. Because the server does not verify who is making the request and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T05:20:04.083336Z"} https://vulnerability.circl.lu/sighting/317e7177-d963-4af7-a409-28ab933a9730/export Tue, 25 Aug 2026 05:20:04 +0000 https://vulnerability.circl.lu/sighting/1977bc63-dd6b-4e7b-b190-90422c3dd7dd/export {"uuid": "1977bc63-dd6b-4e7b-b190-90422c3dd7dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76841", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtv32nxjeh2c", "content": "CVE-2026-76841\nXinference versions up to 2.11 automatically trust code from any model it loads, allowing a user with model\u2011upload rights to execute their own Python scripts on the server. This can let an attacker run\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T05:20:03.372720Z"} {"uuid": "1977bc63-dd6b-4e7b-b190-90422c3dd7dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76841", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtv32nxjeh2c", "content": "CVE-2026-76841\nXinference versions up to 2.11 automatically trust code from any model it loads, allowing a user with model\u2011upload rights to execute their own Python scripts on the server. This can let an attacker run\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T05:20:03.372720Z"} https://vulnerability.circl.lu/sighting/1977bc63-dd6b-4e7b-b190-90422c3dd7dd/export Tue, 25 Aug 2026 05:20:03 +0000 https://vulnerability.circl.lu/sighting/c1c15f87-0d4a-4ce9-a143-f47050ff92c4/export {"uuid": "c1c15f87-0d4a-4ce9-a143-f47050ff92c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76840", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtti7jp5vh2p", "content": "CVE-2026-76840 - rustdesk\nRustDesk\u2019s Windows clipboard sharing can be tricked by a remote computer into writing more data than it expects, which corrupts the program\u2019s memory. This could cause the application to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rustdesk #CVE #infosec", "creation_timestamp": "2026-08-24T14:10:05.877581Z"} {"uuid": "c1c15f87-0d4a-4ce9-a143-f47050ff92c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76840", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtti7jp5vh2p", "content": "CVE-2026-76840 - rustdesk\nRustDesk\u2019s Windows clipboard sharing can be tricked by a remote computer into writing more data than it expects, which corrupts the program\u2019s memory. This could cause the application to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rustdesk #CVE #infosec", "creation_timestamp": "2026-08-24T14:10:05.877581Z"} https://vulnerability.circl.lu/sighting/c1c15f87-0d4a-4ce9-a143-f47050ff92c4/export Mon, 24 Aug 2026 14:10:05 +0000