https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 21 Aug 2026 19:39:50 +0000 https://vulnerability.circl.lu/sighting/782b0a8a-f9f5-41e2-a291-58fe9706929e/export {"uuid": "782b0a8a-f9f5-41e2-a291-58fe9706929e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-mqjf-5f49-2fjh", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mtg2lu7yrt2c", "content": "\ud83d\udea8 BREAKING: GeoServer zero-day (GHSA-mqjf-5f49-2fjh, CVSS 9.8) \u2014 SQLi in jsonArrayContains with PostGIS leads to RCE. Exploited within hours of Aug 12 disclosure by @q1uf3ng. Patches: 3.0.1, 2.28.5, 2.27.6. Restrict public access NOW. Src: The Hacker News", "creation_timestamp": "2026-08-19T06:01:51.212998Z"} {"uuid": "782b0a8a-f9f5-41e2-a291-58fe9706929e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-mqjf-5f49-2fjh", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mtg2lu7yrt2c", "content": "\ud83d\udea8 BREAKING: GeoServer zero-day (GHSA-mqjf-5f49-2fjh, CVSS 9.8) \u2014 SQLi in jsonArrayContains with PostGIS leads to RCE. Exploited within hours of Aug 12 disclosure by @q1uf3ng. Patches: 3.0.1, 2.28.5, 2.27.6. Restrict public access NOW. Src: The Hacker News", "creation_timestamp": "2026-08-19T06:01:51.212998Z"} https://vulnerability.circl.lu/sighting/782b0a8a-f9f5-41e2-a291-58fe9706929e/export Wed, 19 Aug 2026 06:01:51 +0000 https://vulnerability.circl.lu/sighting/b67e8ac9-ab46-4d2c-b5a9-9193fc0566dd/export {"uuid": "b67e8ac9-ab46-4d2c-b5a9-9193fc0566dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-mqjf-5f49-2fjh", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3mtc5gshykz24", "content": "Fortunately, not only has it been finally assigned an advisory (GHSA-mqjf-5f49-2fjh, CVSS=9.8 -- no CVE just yet), but has been patched as of versions 3.0.1, 2.28.5, and 2.27.6\n\n#SQLi #SQLinjection #zeroday #GeoServer #CVSS #Vulnerability #ApplicationSecurity", "creation_timestamp": "2026-08-17T16:42:03.655633Z"} {"uuid": "b67e8ac9-ab46-4d2c-b5a9-9193fc0566dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-mqjf-5f49-2fjh", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3mtc5gshykz24", "content": "Fortunately, not only has it been finally assigned an advisory (GHSA-mqjf-5f49-2fjh, CVSS=9.8 -- no CVE just yet), but has been patched as of versions 3.0.1, 2.28.5, and 2.27.6\n\n#SQLi #SQLinjection #zeroday #GeoServer #CVSS #Vulnerability #ApplicationSecurity", "creation_timestamp": "2026-08-17T16:42:03.655633Z"} https://vulnerability.circl.lu/sighting/b67e8ac9-ab46-4d2c-b5a9-9193fc0566dd/export Mon, 17 Aug 2026 16:42:03 +0000 https://vulnerability.circl.lu/sighting/f98e41cf-1ff4-425c-8f77-500bfc8c306d/export {"uuid": "f98e41cf-1ff4-425c-8f77-500bfc8c306d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-mqjf-5f49-2fjh", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mt6cnagzpw2o", "content": "\ud83d\udea8 BREAKING: GeoServer zero-day (GHSA-mqjf-5f49-2fjh, CVSS 9.8) \u2014 SQLi in jsonArrayContains with PostGIS leads to RCE. Exploited within hours of Aug 12 disclosure by @q1uf3ng. Patches: 3.0.1, 2.28.5, 2.27.6. Restrict public access NOW. Src: The Hacker News", "creation_timestamp": "2026-08-16T04:04:29.310813Z"} {"uuid": "f98e41cf-1ff4-425c-8f77-500bfc8c306d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-mqjf-5f49-2fjh", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mt6cnagzpw2o", "content": "\ud83d\udea8 BREAKING: GeoServer zero-day (GHSA-mqjf-5f49-2fjh, CVSS 9.8) \u2014 SQLi in jsonArrayContains with PostGIS leads to RCE. Exploited within hours of Aug 12 disclosure by @q1uf3ng. Patches: 3.0.1, 2.28.5, 2.27.6. Restrict public access NOW. Src: The Hacker News", "creation_timestamp": "2026-08-16T04:04:29.310813Z"} https://vulnerability.circl.lu/sighting/f98e41cf-1ff4-425c-8f77-500bfc8c306d/export Sun, 16 Aug 2026 04:04:29 +0000 https://vulnerability.circl.lu/sighting/8fed6ec2-9393-4922-815c-3a36cf4607b8/export {"uuid": "8fed6ec2-9393-4922-815c-3a36cf4607b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-mqjf-5f49-2fjh", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3mt4jk4pkec2r", "content": "\u4fee\u6b63\u7248\uff1a\nGeoServer 3.0.x \u2192 3.0.1\nGeoServer 2.28.x \u2192 2.28.5\nGeoServer 2.27.x \u2192 2.27.6\n\u203b2.27\u7cfb\u306fEOL\u306e\u305f\u3081\u30012.27.6\u306f\u3042\u304f\u307e\u3067\u7de9\u548c\u63aa\u7f6e\u3002\u516c\u5f0f\u3082\u5b89\u5b9a\u7248\u30fb\u30e1\u30f3\u30c6\u30ca\u30f3\u30b9\u7248\u3078\u306e\u79fb\u884c\u3092\u63a8\u5968\u3057\u3066\u3044\u307e\u3059\u3002\nGitHub Advisory\uff1a\n GHSA-mqjf-5f49-2fjh\n\nCVE\u756a\u53f7\u306f\u73fe\u5728\u767a\u884c\u5f85\u3061\u3002\n\nGeoServer\u3092\u5229\u7528\u3057\u3066\u3044\u308b\u7d44\u7e54\u306f\u3001\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u516c\u958b\u306e\u6709\u7121\u3001PostGIS\u5229\u7528\u72b6\u6cc1\u3001DB\u63a5\u7d9a\u30e6\u30fc\u30b6\u30fc\u6a29\u9650\u3001\u30a2\u30af\u30bb\u30b9\u30ed\u30b0\u3092\u78ba\u8a8d\u3057\u3001\u4fee\u6b63\u7248\u3078\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u512a\u5148\u3057\u3066\u304f\u3060\u3055\u3044\u3002", "creation_timestamp": "2026-08-15T11:02:43.173084Z"} {"uuid": "8fed6ec2-9393-4922-815c-3a36cf4607b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-mqjf-5f49-2fjh", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3mt4jk4pkec2r", "content": "\u4fee\u6b63\u7248\uff1a\nGeoServer 3.0.x \u2192 3.0.1\nGeoServer 2.28.x \u2192 2.28.5\nGeoServer 2.27.x \u2192 2.27.6\n\u203b2.27\u7cfb\u306fEOL\u306e\u305f\u3081\u30012.27.6\u306f\u3042\u304f\u307e\u3067\u7de9\u548c\u63aa\u7f6e\u3002\u516c\u5f0f\u3082\u5b89\u5b9a\u7248\u30fb\u30e1\u30f3\u30c6\u30ca\u30f3\u30b9\u7248\u3078\u306e\u79fb\u884c\u3092\u63a8\u5968\u3057\u3066\u3044\u307e\u3059\u3002\nGitHub Advisory\uff1a\n GHSA-mqjf-5f49-2fjh\n\nCVE\u756a\u53f7\u306f\u73fe\u5728\u767a\u884c\u5f85\u3061\u3002\n\nGeoServer\u3092\u5229\u7528\u3057\u3066\u3044\u308b\u7d44\u7e54\u306f\u3001\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u516c\u958b\u306e\u6709\u7121\u3001PostGIS\u5229\u7528\u72b6\u6cc1\u3001DB\u63a5\u7d9a\u30e6\u30fc\u30b6\u30fc\u6a29\u9650\u3001\u30a2\u30af\u30bb\u30b9\u30ed\u30b0\u3092\u78ba\u8a8d\u3057\u3001\u4fee\u6b63\u7248\u3078\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u512a\u5148\u3057\u3066\u304f\u3060\u3055\u3044\u3002", "creation_timestamp": "2026-08-15T11:02:43.173084Z"} https://vulnerability.circl.lu/sighting/8fed6ec2-9393-4922-815c-3a36cf4607b8/export Sat, 15 Aug 2026 11:02:43 +0000 https://vulnerability.circl.lu/sighting/a52f2e09-4069-474b-88f4-a487f5e1828c/export {"uuid": "a52f2e09-4069-474b-88f4-a487f5e1828c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-mqjf-5f49-2fjh", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3mt4jk4pjf22r", "content": "\u4fee\u6b63\u7248\uff1a\nGeoServer 3.0.x \u2192 3.0.1\nGeoServer 2.28.x \u2192 2.28.5\nGeoServer 2.27.x \u2192 2.27.6\n\u203b2.27\u7cfb\u306fEOL\u306e\u305f\u3081\u30012.27.6\u306f\u3042\u304f\u307e\u3067\u7de9\u548c\u63aa\u7f6e\u3002\u516c\u5f0f\u3082\u5b89\u5b9a\u7248\u30fb\u30e1\u30f3\u30c6\u30ca\u30f3\u30b9\u7248\u3078\u306e\u79fb\u884c\u3092\u63a8\u5968\u3057\u3066\u3044\u307e\u3059\u3002\nGitHub Advisory\uff1a\n GHSA-mqjf-5f49-2fjh\n\nCVE\u756a\u53f7\u306f\u73fe\u5728\u767a\u884c\u5f85\u3061\u3002\n\nGeoServer\u3092\u5229\u7528\u3057\u3066\u3044\u308b\u7d44\u7e54\u306f\u3001\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u516c\u958b\u306e\u6709\u7121\u3001PostGIS\u5229\u7528\u72b6\u6cc1\u3001DB\u63a5\u7d9a\u30e6\u30fc\u30b6\u30fc\u6a29\u9650\u3001\u30a2\u30af\u30bb\u30b9\u30ed\u30b0\u3092\u78ba\u8a8d\u3057\u3001\u4fee\u6b63\u7248\u3078\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u512a\u5148\u3057\u3066\u304f\u3060\u3055\u3044\u3002", "creation_timestamp": "2026-08-15T11:02:42.729452Z"} {"uuid": "a52f2e09-4069-474b-88f4-a487f5e1828c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-mqjf-5f49-2fjh", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3mt4jk4pjf22r", "content": "\u4fee\u6b63\u7248\uff1a\nGeoServer 3.0.x \u2192 3.0.1\nGeoServer 2.28.x \u2192 2.28.5\nGeoServer 2.27.x \u2192 2.27.6\n\u203b2.27\u7cfb\u306fEOL\u306e\u305f\u3081\u30012.27.6\u306f\u3042\u304f\u307e\u3067\u7de9\u548c\u63aa\u7f6e\u3002\u516c\u5f0f\u3082\u5b89\u5b9a\u7248\u30fb\u30e1\u30f3\u30c6\u30ca\u30f3\u30b9\u7248\u3078\u306e\u79fb\u884c\u3092\u63a8\u5968\u3057\u3066\u3044\u307e\u3059\u3002\nGitHub Advisory\uff1a\n GHSA-mqjf-5f49-2fjh\n\nCVE\u756a\u53f7\u306f\u73fe\u5728\u767a\u884c\u5f85\u3061\u3002\n\nGeoServer\u3092\u5229\u7528\u3057\u3066\u3044\u308b\u7d44\u7e54\u306f\u3001\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u516c\u958b\u306e\u6709\u7121\u3001PostGIS\u5229\u7528\u72b6\u6cc1\u3001DB\u63a5\u7d9a\u30e6\u30fc\u30b6\u30fc\u6a29\u9650\u3001\u30a2\u30af\u30bb\u30b9\u30ed\u30b0\u3092\u78ba\u8a8d\u3057\u3001\u4fee\u6b63\u7248\u3078\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u512a\u5148\u3057\u3066\u304f\u3060\u3055\u3044\u3002", "creation_timestamp": "2026-08-15T11:02:42.729452Z"} https://vulnerability.circl.lu/sighting/a52f2e09-4069-474b-88f4-a487f5e1828c/export Sat, 15 Aug 2026 11:02:42 +0000 https://vulnerability.circl.lu/sighting/1b97a228-9215-4777-8aaf-0e1567d6b41e/export {"uuid": "1b97a228-9215-4777-8aaf-0e1567d6b41e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-mqjf-5f49-2fjh", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3mt4jjzzdl22r", "content": "\u4fee\u6b63\u7248\uff1a\nGeoServer 3.0.x \u2192 3.0.1\nGeoServer 2.28.x \u2192 2.28.5\nGeoServer 2.27.x \u2192 2.27.6\n\u203b2.27\u7cfb\u306fEOL\u306e\u305f\u3081\u30012.27.6\u306f\u3042\u304f\u307e\u3067\u7de9\u548c\u63aa\u7f6e\u3002\u516c\u5f0f\u3082\u5b89\u5b9a\u7248\u30fb\u30e1\u30f3\u30c6\u30ca\u30f3\u30b9\u7248\u3078\u306e\u79fb\u884c\u3092\u63a8\u5968\u3057\u3066\u3044\u307e\u3059\u3002\nGitHub Advisory\uff1a\n GHSA-mqjf-5f49-2fjh\n\nCVE\u756a\u53f7\u306f\u73fe\u5728\u767a\u884c\u5f85\u3061\u3002\n\nGeoServer\u3092\u5229\u7528\u3057\u3066\u3044\u308b\u7d44\u7e54\u306f\u3001\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u516c\u958b\u306e\u6709\u7121\u3001PostGIS\u5229\u7528\u72b6\u6cc1\u3001DB\u63a5\u7d9a\u30e6\u30fc\u30b6\u30fc\u6a29\u9650\u3001\u30a2\u30af\u30bb\u30b9\u30ed\u30b0\u3092\u78ba\u8a8d\u3057\u3001\u4fee\u6b63\u7248\u3078\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u512a\u5148\u3057\u3066\u304f\u3060\u3055\u3044\u3002", "creation_timestamp": "2026-08-15T11:02:42.275206Z"} {"uuid": "1b97a228-9215-4777-8aaf-0e1567d6b41e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-mqjf-5f49-2fjh", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3mt4jjzzdl22r", "content": "\u4fee\u6b63\u7248\uff1a\nGeoServer 3.0.x \u2192 3.0.1\nGeoServer 2.28.x \u2192 2.28.5\nGeoServer 2.27.x \u2192 2.27.6\n\u203b2.27\u7cfb\u306fEOL\u306e\u305f\u3081\u30012.27.6\u306f\u3042\u304f\u307e\u3067\u7de9\u548c\u63aa\u7f6e\u3002\u516c\u5f0f\u3082\u5b89\u5b9a\u7248\u30fb\u30e1\u30f3\u30c6\u30ca\u30f3\u30b9\u7248\u3078\u306e\u79fb\u884c\u3092\u63a8\u5968\u3057\u3066\u3044\u307e\u3059\u3002\nGitHub Advisory\uff1a\n GHSA-mqjf-5f49-2fjh\n\nCVE\u756a\u53f7\u306f\u73fe\u5728\u767a\u884c\u5f85\u3061\u3002\n\nGeoServer\u3092\u5229\u7528\u3057\u3066\u3044\u308b\u7d44\u7e54\u306f\u3001\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u516c\u958b\u306e\u6709\u7121\u3001PostGIS\u5229\u7528\u72b6\u6cc1\u3001DB\u63a5\u7d9a\u30e6\u30fc\u30b6\u30fc\u6a29\u9650\u3001\u30a2\u30af\u30bb\u30b9\u30ed\u30b0\u3092\u78ba\u8a8d\u3057\u3001\u4fee\u6b63\u7248\u3078\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u512a\u5148\u3057\u3066\u304f\u3060\u3055\u3044\u3002", "creation_timestamp": "2026-08-15T11:02:42.275206Z"} https://vulnerability.circl.lu/sighting/1b97a228-9215-4777-8aaf-0e1567d6b41e/export Sat, 15 Aug 2026 11:02:42 +0000