{"vulnerability": "cve-2026-5019", "sightings": [{"uuid": "1d8f2285-cf4f-41b2-be4d-781fc71fbb96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5019", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mi5tqe2i6u2s", "content": "", "creation_timestamp": "2026-03-29T00:00:40.427396Z"}, {"uuid": "541debec-5fbd-4942-9544-916ff415047f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5019", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mi5tyngws42s", "content": "", "creation_timestamp": "2026-03-29T00:05:18.031124Z"}, {"uuid": "30eb6ae8-73e0-465b-b2ab-5561e285ba03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5019", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3minif5q4um2q", "content": "", "creation_timestamp": "2026-04-04T05:20:08.337333Z"}, {"uuid": "fa31238b-5e6f-45bc-8664-c71375577ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5019", "type": "published-proof-of-concept", "source": "Telegram/2ZCZ0X-U_suKs7wtR6ZGpeXrnXUtKYHoBRWUbFIBTrMUhlY", "content": "", "creation_timestamp": "2026-03-29T01:15:46.000000Z"}, {"uuid": "125c6075-809f-411a-802d-893822ce6202", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50196", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3molwuneim227", "content": "CVE-2026-50196 - Insecure Deserialization in Steeltoe. CVSS 7.5. Leads to DoS via unhandled exception in Eureka cache refresh. No patch yet. Monitor and apply workarounds. #CVE #Steeltoe #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-50196/", "creation_timestamp": "2026-06-18T23:05:10.802659Z"}, {"uuid": "8d42508b-7283-4fe1-88ce-7323694951bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50195", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mom72udh7u25", "content": "[containerd] Patch releases addressing CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, and CVE-2026-47262", "creation_timestamp": "2026-06-19T01:31:49.293270Z"}, {"uuid": "8dcd6160-07fd-4b57-bb31-dd807fd43f50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50195", "type": "seen", "source": "https://bsky.app/profile/canartuc.com/post/3momyrcpuo42y", "content": "containerd patched five CRI-plugin CVEs at once across 2.3.2, 2.2.5, 2.1.9, 2.0.10 and 1.7.33, all reported by AWS. CVE-2026-50195 poisons an image tag through checkpoint import. Have you audited which restore paths your clusters actually allow?\n\n#containers", "creation_timestamp": "2026-06-19T09:11:46.135556Z"}, {"uuid": "5436a69a-9607-4fa4-9b3e-7b31abe291a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50195", "type": "seen", "source": "https://bsky.app/profile/canartuc.com/post/3mon3ocbcmd2e", "content": "containerd patched 1.7 through 2.3 in one coordinated drop, so managed Kubernetes everywhere now has five CVEs to clear. The riskiest, CVE-2026-50195, abuses checkpoint restore. Who owns runtime patching on your team, platform or security?\n\n#kubernetes", "creation_timestamp": "2026-06-19T10:03:46.866108Z"}, {"uuid": "126ce7b4-26f3-4228-b5c9-cf67ad733f6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50195", "type": "seen", "source": "https://bsky.app/profile/mfahlandt.bsky.social/post/3mouxgsffum2z", "content": "\u26a0\ufe0f Strimzi Kafka Operator 1.0.1 removes older CRD API support.\n- Strimzi 1.0.1: Drops v1beta2, v1beta1, v1alpha1 CRD APIs.\n- containerd: Fixes CVE-2026-50195, CVE-2026-53488.\n- Prometheus v3.5.4: Addresses GHSA-39j6-789q-qxvh.\nFull breakdown:\n\nhttps://lwcn.dev/newsletter/2026-week-26/", "creation_timestamp": "2026-06-22T13:09:18.170382Z"}, {"uuid": "795222fe-6a87-44bd-a3ff-ea50a79d1612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50193", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moylsm4iin2j", "content": "CVE-2026-50193 - jackson-databind: Deeply nested JsonNode throws StackOverflowError for toString()\nCVE ID : CVE-2026-50193\n \n Published : June 23, 2026, 9 p.m. | 2\u00a0hours, 44\u00a0minutes ago\n \n Description : jackson-databind contains the general-purpose data-binding functionality a...", "creation_timestamp": "2026-06-23T23:51:47.707622Z"}, {"uuid": "4cacd0ff-5646-4e7a-94b1-2dd14a249e18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50195", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpmcfgiidz2n", "content": "CVE-2026-50195 - containerd: CRI checkpoint import allows local image tag poisoning\nCVE ID : CVE-2026-50195\n \n Published : July 1, 2026, 5:50 p.m. | 1\u00a0hour, 55\u00a0minutes ago\n \n Description : containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9...", "creation_timestamp": "2026-07-01T19:56:36.762120Z"}, {"uuid": "262d0e00-4466-45bd-af69-cdf52aee763e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50195", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnrdvo57o2r", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-50195 \u0432 containerd: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E66AD8CF-0848-455D-B80A-BC109FCDCCEF", "creation_timestamp": "2026-07-02T09:56:51.887272Z"}, {"uuid": "459e042e-87f9-4f1f-9603-d66d89bef544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50192", "type": "published-proof-of-concept", "source": "https://github.com/kerberos-io/agent/security/advisories/GHSA-h5gx-45rj-2h5j", "content": "", "creation_timestamp": "2026-07-02T18:35:11.962994Z"}, {"uuid": "cc3c07c8-4baf-49c3-983a-2e3a111b490c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50195", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqnbsbitx2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-50195 \u0432 containerd: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/8E9CE98C-107D-42A8-8620-1F65211A98CD", "creation_timestamp": "2026-07-03T13:22:04.807939Z"}, {"uuid": "6fa27222-d3a7-487b-8edf-469782f5cc5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50197", "type": "published-proof-of-concept", "source": "https://github.com/zalando/skipper/security/advisories/GHSA-659f-rgp5-w4wf", "content": "", "creation_timestamp": "2026-07-08T22:35:12.658103Z"}]}