<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 23 Jun 2026 10:35:50 +0000</lastBuildDate>
    <item>
      <title>2c8fa618-ec5f-49e0-9dba-22437b90b424</title>
      <link>https://vulnerability.circl.lu/sighting/2c8fa618-ec5f-49e0-9dba-22437b90b424/export</link>
      <description>{"uuid": "2c8fa618-ec5f-49e0-9dba-22437b90b424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5013", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mi5ujbhlua2s", "content": "", "creation_timestamp": "2026-03-29T00:14:35.822436Z"}</description>
      <content:encoded>{"uuid": "2c8fa618-ec5f-49e0-9dba-22437b90b424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5013", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mi5ujbhlua2s", "content": "", "creation_timestamp": "2026-03-29T00:14:35.822436Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2c8fa618-ec5f-49e0-9dba-22437b90b424/export</guid>
      <pubDate>Sun, 29 Mar 2026 00:14:35 +0000</pubDate>
    </item>
    <item>
      <title>94ef0e66-df38-41e2-855c-d0a8a48a096b</title>
      <link>https://vulnerability.circl.lu/sighting/94ef0e66-df38-41e2-855c-d0a8a48a096b/export</link>
      <description>{"uuid": "94ef0e66-df38-41e2-855c-d0a8a48a096b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50132", "type": "published-proof-of-concept", "source": "https://github.com/Budibase/budibase/security/advisories/GHSA-v7j5-vc4m-723w", "content": "", "creation_timestamp": "2026-05-28T08:45:18.000000Z"}</description>
      <content:encoded>{"uuid": "94ef0e66-df38-41e2-855c-d0a8a48a096b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50132", "type": "published-proof-of-concept", "source": "https://github.com/Budibase/budibase/security/advisories/GHSA-v7j5-vc4m-723w", "content": "", "creation_timestamp": "2026-05-28T08:45:18.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/94ef0e66-df38-41e2-855c-d0a8a48a096b/export</guid>
      <pubDate>Thu, 28 May 2026 08:45:18 +0000</pubDate>
    </item>
    <item>
      <title>4b997e7e-97ec-4159-8ac3-acfd488b4869</title>
      <link>https://vulnerability.circl.lu/sighting/4b997e7e-97ec-4159-8ac3-acfd488b4869/export</link>
      <description>{"uuid": "4b997e7e-97ec-4159-8ac3-acfd488b4869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50136", "type": "published-proof-of-concept", "source": "https://github.com/Budibase/budibase/security/advisories/GHSA-jj36-r9w3-3pfh", "content": "", "creation_timestamp": "2026-05-28T09:02:01.000000Z"}</description>
      <content:encoded>{"uuid": "4b997e7e-97ec-4159-8ac3-acfd488b4869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50136", "type": "published-proof-of-concept", "source": "https://github.com/Budibase/budibase/security/advisories/GHSA-jj36-r9w3-3pfh", "content": "", "creation_timestamp": "2026-05-28T09:02:01.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4b997e7e-97ec-4159-8ac3-acfd488b4869/export</guid>
      <pubDate>Thu, 28 May 2026 09:02:01 +0000</pubDate>
    </item>
    <item>
      <title>0e1ada2c-b2ba-40c0-a0d3-7d09179061b9</title>
      <link>https://vulnerability.circl.lu/sighting/0e1ada2c-b2ba-40c0-a0d3-7d09179061b9/export</link>
      <description>{"uuid": "0e1ada2c-b2ba-40c0-a0d3-7d09179061b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50137", "type": "published-proof-of-concept", "source": "https://github.com/Budibase/budibase/security/advisories/GHSA-35c4-rvc8-frhm", "content": "", "creation_timestamp": "2026-05-28T09:58:22.000000Z"}</description>
      <content:encoded>{"uuid": "0e1ada2c-b2ba-40c0-a0d3-7d09179061b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50137", "type": "published-proof-of-concept", "source": "https://github.com/Budibase/budibase/security/advisories/GHSA-35c4-rvc8-frhm", "content": "", "creation_timestamp": "2026-05-28T09:58:22.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0e1ada2c-b2ba-40c0-a0d3-7d09179061b9/export</guid>
      <pubDate>Thu, 28 May 2026 09:58:22 +0000</pubDate>
    </item>
    <item>
      <title>8d19eb19-0afb-4c3a-b472-7430464e425d</title>
      <link>https://vulnerability.circl.lu/sighting/8d19eb19-0afb-4c3a-b472-7430464e425d/export</link>
      <description>{"uuid": "8d19eb19-0afb-4c3a-b472-7430464e425d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50131", "type": "seen", "source": "https://bsky.app/profile/fedify.hollo.social.ap.brid.gy/post/3mnrwxyyvdir2", "content": "### Fedify security updates: 1.9.12, 1.10.11, 2.0.20, 2.1.16, and 2.2.5\n\nIf you use Fedify, update to a patched release now. CVE-2026-50131 affects Fedify's public URL validation for remote document and media loading. An attacker could use special-use IP address ranges to bypass Fedify's SSRF [\u2026]", "creation_timestamp": "2026-06-08T14:57:55.145967Z"}</description>
      <content:encoded>{"uuid": "8d19eb19-0afb-4c3a-b472-7430464e425d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50131", "type": "seen", "source": "https://bsky.app/profile/fedify.hollo.social.ap.brid.gy/post/3mnrwxyyvdir2", "content": "### Fedify security updates: 1.9.12, 1.10.11, 2.0.20, 2.1.16, and 2.2.5\n\nIf you use Fedify, update to a patched release now. CVE-2026-50131 affects Fedify's public URL validation for remote document and media loading. An attacker could use special-use IP address ranges to bypass Fedify's SSRF [\u2026]", "creation_timestamp": "2026-06-08T14:57:55.145967Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8d19eb19-0afb-4c3a-b472-7430464e425d/export</guid>
      <pubDate>Mon, 08 Jun 2026 14:57:55 +0000</pubDate>
    </item>
    <item>
      <title>bb5ca124-96f4-4925-a9e2-81d3902daeb9</title>
      <link>https://vulnerability.circl.lu/sighting/bb5ca124-96f4-4925-a9e2-81d3902daeb9/export</link>
      <description>{"uuid": "bb5ca124-96f4-4925-a9e2-81d3902daeb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50131", "type": "seen", "source": "https://bsky.app/profile/hollo.hollo.social.ap.brid.gy/post/3mnrxlz2slhe2", "content": "### Hollo security updates: 0.7.18, 0.8.7, and 0.9.4\n\nIf you run Hollo, update to a patched release now. CVE-2026-50131 affects Fedify's SSRF protection, and Hollo depends on Fedify for ActivityPub federation.\n\nFedify guards against SSRF (Server-Side Request Forgery) when fetching remote [\u2026]", "creation_timestamp": "2026-06-08T15:09:05.707464Z"}</description>
      <content:encoded>{"uuid": "bb5ca124-96f4-4925-a9e2-81d3902daeb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50131", "type": "seen", "source": "https://bsky.app/profile/hollo.hollo.social.ap.brid.gy/post/3mnrxlz2slhe2", "content": "### Hollo security updates: 0.7.18, 0.8.7, and 0.9.4\n\nIf you run Hollo, update to a patched release now. CVE-2026-50131 affects Fedify's SSRF protection, and Hollo depends on Fedify for ActivityPub federation.\n\nFedify guards against SSRF (Server-Side Request Forgery) when fetching remote [\u2026]", "creation_timestamp": "2026-06-08T15:09:05.707464Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bb5ca124-96f4-4925-a9e2-81d3902daeb9/export</guid>
      <pubDate>Mon, 08 Jun 2026 15:09:05 +0000</pubDate>
    </item>
    <item>
      <title>803efc98-53ae-4bc4-9ddd-628da427271b</title>
      <link>https://vulnerability.circl.lu/sighting/803efc98-53ae-4bc4-9ddd-628da427271b/export</link>
      <description>{"uuid": "803efc98-53ae-4bc4-9ddd-628da427271b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50131", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mnt5okxrpl2a", "content": "Top 3 CVE for last 7 days:\nCVE-2025-48595: 137 interactions\nCVE-2015-5119: 20 interactions\nCVE-2020-0601: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-50751: 6 interactions\nCVE-2025-8088: 5 interactions\nCVE-2026-50131: 5 interactions\n", "creation_timestamp": "2026-06-09T02:30:30.807490Z"}</description>
      <content:encoded>{"uuid": "803efc98-53ae-4bc4-9ddd-628da427271b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50131", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mnt5okxrpl2a", "content": "Top 3 CVE for last 7 days:\nCVE-2025-48595: 137 interactions\nCVE-2015-5119: 20 interactions\nCVE-2020-0601: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-50751: 6 interactions\nCVE-2025-8088: 5 interactions\nCVE-2026-50131: 5 interactions\n", "creation_timestamp": "2026-06-09T02:30:30.807490Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/803efc98-53ae-4bc4-9ddd-628da427271b/export</guid>
      <pubDate>Tue, 09 Jun 2026 02:30:30 +0000</pubDate>
    </item>
    <item>
      <title>5bf4af89-cada-4e69-b3e1-0008c64e9ab9</title>
      <link>https://vulnerability.circl.lu/sighting/5bf4af89-cada-4e69-b3e1-0008c64e9ab9/export</link>
      <description>{"uuid": "5bf4af89-cada-4e69-b3e1-0008c64e9ab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50131", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnxsdlo6672x", "content": "CVE-2026-50131 - Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges\nCVE ID : CVE-2026-50131\n \n Published : June 10, 2026, 8:27 p.m. | 50\u00a0minutes ago\n \n Description : Fedify is a TypeScript library for building f...", "creation_timestamp": "2026-06-10T22:51:04.533382Z"}</description>
      <content:encoded>{"uuid": "5bf4af89-cada-4e69-b3e1-0008c64e9ab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50131", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnxsdlo6672x", "content": "CVE-2026-50131 - Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges\nCVE ID : CVE-2026-50131\n \n Published : June 10, 2026, 8:27 p.m. | 50\u00a0minutes ago\n \n Description : Fedify is a TypeScript library for building f...", "creation_timestamp": "2026-06-10T22:51:04.533382Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5bf4af89-cada-4e69-b3e1-0008c64e9ab9/export</guid>
      <pubDate>Wed, 10 Jun 2026 22:51:04 +0000</pubDate>
    </item>
    <item>
      <title>dd1ac896-fccb-47ea-ac2b-f31f7ebcff93</title>
      <link>https://vulnerability.circl.lu/sighting/dd1ac896-fccb-47ea-ac2b-f31f7ebcff93/export</link>
      <description>{"uuid": "dd1ac896-fccb-47ea-ac2b-f31f7ebcff93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50131", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnxsve6fp726", "content": "\ud83d\udfe0 CVE-2026-50131 - High (8.6)\n\nFedify is a TypeScript library for building federated server apps powered by ActivityPub. Fedify ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-50131/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T23:00:46.126401Z"}</description>
      <content:encoded>{"uuid": "dd1ac896-fccb-47ea-ac2b-f31f7ebcff93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50131", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnxsve6fp726", "content": "\ud83d\udfe0 CVE-2026-50131 - High (8.6)\n\nFedify is a TypeScript library for building federated server apps powered by ActivityPub. Fedify ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-50131/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T23:00:46.126401Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dd1ac896-fccb-47ea-ac2b-f31f7ebcff93/export</guid>
      <pubDate>Wed, 10 Jun 2026 23:00:46 +0000</pubDate>
    </item>
  </channel>
</rss>
