<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 26 Jun 2026 06:37:56 +0000</lastBuildDate>
    <item>
      <title>dda6ce6f-1ac0-4cc5-b0cd-a94855ae4292</title>
      <link>https://vulnerability.circl.lu/sighting/dda6ce6f-1ac0-4cc5-b0cd-a94855ae4292/export</link>
      <description>{"uuid": "dda6ce6f-1ac0-4cc5-b0cd-a94855ae4292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41690", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mleazdfstp2c", "content": "\ud83d\udfe0 CVE-2026-41690 - High (8.6)\n\n18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fas...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41690/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-08T17:29:53.380360Z"}</description>
      <content:encoded>{"uuid": "dda6ce6f-1ac0-4cc5-b0cd-a94855ae4292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41690", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mleazdfstp2c", "content": "\ud83d\udfe0 CVE-2026-41690 - High (8.6)\n\n18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fas...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41690/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-08T17:29:53.380360Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dda6ce6f-1ac0-4cc5-b0cd-a94855ae4292/export</guid>
      <pubDate>Fri, 08 May 2026 17:29:53 +0000</pubDate>
    </item>
    <item>
      <title>e09b36e9-2ad1-4b49-bbdc-9c40c0584249</title>
      <link>https://vulnerability.circl.lu/sighting/e09b36e9-2ad1-4b49-bbdc-9c40c0584249/export</link>
      <description>{"uuid": "e09b36e9-2ad1-4b49-bbdc-9c40c0584249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41693", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mleazkwl3f2s", "content": "\ud83d\udfe0 CVE-2026-41693 - High (8.2)\n\ni18next-fs-backend is a backend layer for i18next using in Node.js and for Deno to load translati...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41693/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-08T17:30:01.175631Z"}</description>
      <content:encoded>{"uuid": "e09b36e9-2ad1-4b49-bbdc-9c40c0584249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41693", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mleazkwl3f2s", "content": "\ud83d\udfe0 CVE-2026-41693 - High (8.2)\n\ni18next-fs-backend is a backend layer for i18next using in Node.js and for Deno to load translati...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41693/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-08T17:30:01.175631Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e09b36e9-2ad1-4b49-bbdc-9c40c0584249/export</guid>
      <pubDate>Fri, 08 May 2026 17:30:01 +0000</pubDate>
    </item>
    <item>
      <title>46310ccd-77fe-4e82-be91-2d8f4816a67b</title>
      <link>https://vulnerability.circl.lu/sighting/46310ccd-77fe-4e82-be91-2d8f4816a67b/export</link>
      <description>{"uuid": "46310ccd-77fe-4e82-be91-2d8f4816a67b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41690", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mleepyw5wy2i", "content": "CVE-2026-41690 - Prototype pollution and path traversal in i18next-http-middleware via user-controlled language and namespace parameters\nCVE ID : CVE-2026-41690\n \n Published : May 8, 2026, 4:16 p.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : 18next-http-middleware is a middlewa...", "creation_timestamp": "2026-05-08T18:36:14.742593Z"}</description>
      <content:encoded>{"uuid": "46310ccd-77fe-4e82-be91-2d8f4816a67b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41690", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mleepyw5wy2i", "content": "CVE-2026-41690 - Prototype pollution and path traversal in i18next-http-middleware via user-controlled language and namespace parameters\nCVE ID : CVE-2026-41690\n \n Published : May 8, 2026, 4:16 p.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : 18next-http-middleware is a middlewa...", "creation_timestamp": "2026-05-08T18:36:14.742593Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/46310ccd-77fe-4e82-be91-2d8f4816a67b/export</guid>
      <pubDate>Fri, 08 May 2026 18:36:14 +0000</pubDate>
    </item>
    <item>
      <title>e9539c9d-ee59-4702-b839-fd329a9bb77f</title>
      <link>https://vulnerability.circl.lu/sighting/e9539c9d-ee59-4702-b839-fd329a9bb77f/export</link>
      <description>{"uuid": "e9539c9d-ee59-4702-b839-fd329a9bb77f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41693", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlefpmjr262k", "content": "CVE-2026-41693 - i18next-fs-backend: Path traversal via unsanitised lng/ns allows arbitrary file read/overwrite\nCVE ID : CVE-2026-41693\n \n Published : May 8, 2026, 4:16 p.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : i18next-fs-backend is a backend layer for i18next using in No...", "creation_timestamp": "2026-05-08T18:53:55.488181Z"}</description>
      <content:encoded>{"uuid": "e9539c9d-ee59-4702-b839-fd329a9bb77f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41693", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlefpmjr262k", "content": "CVE-2026-41693 - i18next-fs-backend: Path traversal via unsanitised lng/ns allows arbitrary file read/overwrite\nCVE ID : CVE-2026-41693\n \n Published : May 8, 2026, 4:16 p.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : i18next-fs-backend is a backend layer for i18next using in No...", "creation_timestamp": "2026-05-08T18:53:55.488181Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e9539c9d-ee59-4702-b839-fd329a9bb77f/export</guid>
      <pubDate>Fri, 08 May 2026 18:53:55 +0000</pubDate>
    </item>
    <item>
      <title>d9085a79-1732-47e0-9881-b0f3c4ffdc9e</title>
      <link>https://vulnerability.circl.lu/sighting/d9085a79-1732-47e0-9881-b0f3c4ffdc9e/export</link>
      <description>{"uuid": "d9085a79-1732-47e0-9881-b0f3c4ffdc9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41695", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvwjl2q6v2i", "content": "\ud83d\udfe0 CVE-2026-41695 - High (7.5)\n\nSpring Data Commons applications may be vulnerable to denial of service through resource exhausti...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41695/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T05:00:26.064732Z"}</description>
      <content:encoded>{"uuid": "d9085a79-1732-47e0-9881-b0f3c4ffdc9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41695", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvwjl2q6v2i", "content": "\ud83d\udfe0 CVE-2026-41695 - High (7.5)\n\nSpring Data Commons applications may be vulnerable to denial of service through resource exhausti...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41695/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T05:00:26.064732Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d9085a79-1732-47e0-9881-b0f3c4ffdc9e/export</guid>
      <pubDate>Wed, 10 Jun 2026 05:00:26 +0000</pubDate>
    </item>
    <item>
      <title>79fe459c-e77b-4173-bc93-d30013893728</title>
      <link>https://vulnerability.circl.lu/sighting/79fe459c-e77b-4173-bc93-d30013893728/export</link>
      <description>{"uuid": "79fe459c-e77b-4173-bc93-d30013893728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41699", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnyr2ucwjy2n", "content": "\ud83d\udfe0 CVE-2026-41699 - High (8.1)\n\nSpring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginate...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41699/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-11T08:00:43.304211Z"}</description>
      <content:encoded>{"uuid": "79fe459c-e77b-4173-bc93-d30013893728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41699", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnyr2ucwjy2n", "content": "\ud83d\udfe0 CVE-2026-41699 - High (8.1)\n\nSpring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginate...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41699/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-11T08:00:43.304211Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/79fe459c-e77b-4173-bc93-d30013893728/export</guid>
      <pubDate>Thu, 11 Jun 2026 08:00:43 +0000</pubDate>
    </item>
    <item>
      <title>43ef3f4e-40a8-4ffc-b331-a5008deb035d</title>
      <link>https://vulnerability.circl.lu/sighting/43ef3f4e-40a8-4ffc-b331-a5008deb035d/export</link>
      <description>{"uuid": "43ef3f4e-40a8-4ffc-b331-a5008deb035d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41699", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnyvujrrsc2i", "content": "CVE-2026-41699 - Unsafe Deserialization in Spring GraphQL\nCVE ID : CVE-2026-41699\n \n Published : June 11, 2026, 7:16 a.m. | 1\u00a0hour, 47\u00a0minutes ago\n \n Description : Spring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL querie...", "creation_timestamp": "2026-06-11T09:26:38.213473Z"}</description>
      <content:encoded>{"uuid": "43ef3f4e-40a8-4ffc-b331-a5008deb035d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41699", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnyvujrrsc2i", "content": "CVE-2026-41699 - Unsafe Deserialization in Spring GraphQL\nCVE ID : CVE-2026-41699\n \n Published : June 11, 2026, 7:16 a.m. | 1\u00a0hour, 47\u00a0minutes ago\n \n Description : Spring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL querie...", "creation_timestamp": "2026-06-11T09:26:38.213473Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/43ef3f4e-40a8-4ffc-b331-a5008deb035d/export</guid>
      <pubDate>Thu, 11 Jun 2026 09:26:38 +0000</pubDate>
    </item>
    <item>
      <title>ee510716-9fc6-4aa4-af8a-bb76623598da</title>
      <link>https://vulnerability.circl.lu/sighting/ee510716-9fc6-4aa4-af8a-bb76623598da/export</link>
      <description>{"uuid": "ee510716-9fc6-4aa4-af8a-bb76623598da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41699", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobvo7j3kj23", "content": "\ud83d\udea8  ALERT: CVE-2026-41699\n\nCVSS 8.1/10\n\n\ud83d\udccb WHAT IT IS:\nSpring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL queries. An attacker can craft a malicious GraphQL request that can lead to Remote Code Execution when the application exposes a paginated (", "creation_timestamp": "2026-06-14T23:17:06.698776Z"}</description>
      <content:encoded>{"uuid": "ee510716-9fc6-4aa4-af8a-bb76623598da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41699", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobvo7j3kj23", "content": "\ud83d\udea8  ALERT: CVE-2026-41699\n\nCVSS 8.1/10\n\n\ud83d\udccb WHAT IT IS:\nSpring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL queries. An attacker can craft a malicious GraphQL request that can lead to Remote Code Execution when the application exposes a paginated (", "creation_timestamp": "2026-06-14T23:17:06.698776Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ee510716-9fc6-4aa4-af8a-bb76623598da/export</guid>
      <pubDate>Sun, 14 Jun 2026 23:17:06 +0000</pubDate>
    </item>
    <item>
      <title>93f01e43-d092-413e-b125-9dac5e52df45</title>
      <link>https://vulnerability.circl.lu/sighting/93f01e43-d092-413e-b125-9dac5e52df45/export</link>
      <description>{"uuid": "93f01e43-d092-413e-b125-9dac5e52df45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41699", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mofrmmqg672x", "content": "\ud83d\udd17 CVE : CVE-2026-41001, CVE-2026-41699, CVE-2026-41700, CVE-2026-41856", "creation_timestamp": "2026-06-16T12:15:14.673597Z"}</description>
      <content:encoded>{"uuid": "93f01e43-d092-413e-b125-9dac5e52df45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41699", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mofrmmqg672x", "content": "\ud83d\udd17 CVE : CVE-2026-41001, CVE-2026-41699, CVE-2026-41700, CVE-2026-41856", "creation_timestamp": "2026-06-16T12:15:14.673597Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/93f01e43-d092-413e-b125-9dac5e52df45/export</guid>
      <pubDate>Tue, 16 Jun 2026 12:15:14 +0000</pubDate>
    </item>
    <item>
      <title>b1f37976-dd56-4793-ac4e-cb35e5b8207b</title>
      <link>https://vulnerability.circl.lu/sighting/b1f37976-dd56-4793-ac4e-cb35e5b8207b/export</link>
      <description>{"uuid": "b1f37976-dd56-4793-ac4e-cb35e5b8207b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41699", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motmkqsfwd2v", "content": "\ud83d\udea8  ALERT: CVE-2026-41699\n\nCVSS 8.1/10\n\n\ud83d\udccb WHAT IT IS:\nSpring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL queries. An attacker can craft a malicious GraphQL request that can lead to Remote Code Execution when the application exposes a paginated (", "creation_timestamp": "2026-06-22T00:21:59.120336Z"}</description>
      <content:encoded>{"uuid": "b1f37976-dd56-4793-ac4e-cb35e5b8207b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41699", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motmkqsfwd2v", "content": "\ud83d\udea8  ALERT: CVE-2026-41699\n\nCVSS 8.1/10\n\n\ud83d\udccb WHAT IT IS:\nSpring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL queries. An attacker can craft a malicious GraphQL request that can lead to Remote Code Execution when the application exposes a paginated (", "creation_timestamp": "2026-06-22T00:21:59.120336Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b1f37976-dd56-4793-ac4e-cb35e5b8207b/export</guid>
      <pubDate>Mon, 22 Jun 2026 00:21:59 +0000</pubDate>
    </item>
  </channel>
</rss>
