https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 22 Jul 2026 22:39:18 +0000 https://vulnerability.circl.lu/sighting/356c645f-81d1-4d1e-9c42-802b5dae2717/export {"uuid": "356c645f-81d1-4d1e-9c42-802b5dae2717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63107", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116954824349658240", "content": "CVE-2026-63107 - SSRF in Limesurvey. Authenticated users can abuse Host header in REST API to access internal services and cloud metadata. CVSS 7.7. No patch yet - restrict network access and monitor for abuse. #CVE #Limesurvey #infosec\nhttps://www.valtersit.com/cve/CVE-2026-63107/", "creation_timestamp": "2026-07-20T23:09:55.262169Z"} {"uuid": "356c645f-81d1-4d1e-9c42-802b5dae2717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63107", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116954824349658240", "content": "CVE-2026-63107 - SSRF in Limesurvey. Authenticated users can abuse Host header in REST API to access internal services and cloud metadata. CVSS 7.7. No patch yet - restrict network access and monitor for abuse. #CVE #Limesurvey #infosec\nhttps://www.valtersit.com/cve/CVE-2026-63107/", "creation_timestamp": "2026-07-20T23:09:55.262169Z"} https://vulnerability.circl.lu/sighting/356c645f-81d1-4d1e-9c42-802b5dae2717/export Mon, 20 Jul 2026 23:09:55 +0000 https://vulnerability.circl.lu/sighting/c10c595d-1401-4de4-af59-ea2a6fdc2152/export {"uuid": "c10c595d-1401-4de4-af59-ea2a6fdc2152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63107", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mr4g2l2kq52l", "content": "CVE-2026-63107 - SSRF in Limesurvey. Authenticated users can abuse Host header in REST API to access internal services and cloud metadata. CVSS 7.7. No patch yet - restrict network access and monitor for abuse. #CVE #Limesurvey #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-63107/", "creation_timestamp": "2026-07-20T23:09:54.979081Z"} {"uuid": "c10c595d-1401-4de4-af59-ea2a6fdc2152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63107", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mr4g2l2kq52l", "content": "CVE-2026-63107 - SSRF in Limesurvey. Authenticated users can abuse Host header in REST API to access internal services and cloud metadata. CVSS 7.7. No patch yet - restrict network access and monitor for abuse. #CVE #Limesurvey #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-63107/", "creation_timestamp": "2026-07-20T23:09:54.979081Z"} https://vulnerability.circl.lu/sighting/c10c595d-1401-4de4-af59-ea2a6fdc2152/export Mon, 20 Jul 2026 23:09:54 +0000