{"vulnerability": "cve-2026-5988", "sightings": [{"uuid": "3a82eb8c-92d1-45a7-965b-2ad1be72d126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5988", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj45acmzd22o", "content": "", "creation_timestamp": "2026-04-10T01:10:30.820816Z"}, {"uuid": "91586277-6661-433c-aa6c-d89ab8952c4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5988", "type": "seen", "source": "Telegram/r2aLRB54Ih_OSR-P7tVQ1PquPIQ5c0jGeGUejuuUUcNPCN8", "content": "", "creation_timestamp": "2026-04-10T01:19:02.000000Z"}, {"uuid": "bffd6a18-7057-4239-98ad-33b8a19c57ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59881", "type": "seen", "source": "https://gist.github.com/alon710/8b85a9db45c3273615bc588dcd240ceb", "content": "# CVE-2026-59881: CVE-2026-59881: Unnegotiated WebSocket RSV1 Frame Handling in aiohttp\n\n> **CVSS Score:** 6.9\n> **Published:** 2026-08-03\n> **Full Report:** https://cvereports.com/reports/CVE-2026-59881\n\n## Summary\nCVE-2026-59881 is a protocol compliance and input validation vulnerability in the client-side WebSocket implementation of the aiohttp asynchronous HTTP client/server framework for Python. Prior to version 3.14.2, the framework's parser unexpectedly accepts and attempts to decompress frames containing the RSV1 bit, even when the permessage-deflate extension has not been negotiated during the initial WebSocket handshake. This violation of RFC 6455 allows a malicious or compromised server to bypass client configuration, forcing decompression routines that can lead to high CPU and memory consumption, resulting in a denial-of-service condition.\n\n## TL;DR\nA vulnerability in the aiohttp WebSocket client allows malicious servers to bypass client configuration and force decompression of server-supplied payloads. This occurs because the parser improperly defaults to accepting compressed frames even when the permessage-deflate extension was not negotiated, allowing attackers to trigger a Denial-of-Service (DoS) condition via decompression bombs.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-20\n- **Attack Vector**: Network\n- **CVSS v4.0 Score**: 6.9 (Medium)\n- **EPSS Score**: 0.00302\n- **Impact**: Denial of Service (DoS) / Resource Exhaustion\n- **Exploit Status**: Proof-of-Concept\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- aiohttp client-side WebSocket reader implementations prior to v3.14.2\n- **aiohttp**: < 3.14.2 (Fixed in: `3.14.2`)\n\n## Mitigation\n\n- Upgrade to aiohttp version 3.14.2 or higher to enforce strict compliance with WebSocket frame specifications.\n- Restrict outgoing WebSocket client connections to verified and authenticated hosts.\n- Deploy container-level CPU and memory limits to prevent processes from crashing the entire host system during resource exhaustion events.\n- Avoid using unencrypted WebSocket connections (ws://) to prevent frame injection attacks by intermediaries.\n\n**Remediation Steps:**\n1. Identify all projects and dependencies running aiohttp versions prior to 3.14.2.\n2. Update requirements.txt, setup.py, or Pipfile configurations to require aiohttp >= 3.14.2.\n3. Run your application's test suite to ensure compatibility with the updated version.\n4. Rebuild your deployment containers and push the patched version to production environments.\n\n## References\n\n- [NVD Entry for CVE-2026-59881](https://nvd.nist.gov/vuln/detail/CVE-2026-59881)\n- [GitHub Security Advisory GHSA-mq44-7p77-q5h7](https://github.com/aio-libs/aiohttp/security/advisories/GHSA-mq44-7p77-q5h7)\n- [aiohttp Release Tag v3.14.2](http://github.com/aio-libs/aiohttp/releases/tag/v3.14.2)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-59881) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-04T04:31:09.945635Z"}, {"uuid": "eaa84ee1-a990-4307-ad07-44eba038f3d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5988", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkogenxxof2v", "content": "\ud83d\udccc CVE-2026-5988 - A vulnerability was detected in Tenda F451 1.0.0.7. This impacts the function formWrlsafeset of the file /goform/AdvSetWrlsafeset. Performing a manipu... https://www.cyberhub.blog/cves/CVE-2026-5988", "creation_timestamp": "2026-04-30T01:07:07.362978Z"}, {"uuid": "d58d6581-4d00-4159-a771-0c59598d294b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59880", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5q4e2tph25", "content": "CVE-2026-59880 - Immutable.js: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set\nCVE ID : CVE-2026-59880\n \n Published : July 8, 2026, 4:16 p.m. | 58\u00a0minutes ago\n \n Description : Immutable.js provides many Persistent Immutable data structures. Prior t...", "creation_timestamp": "2026-07-08T18:17:20.380008Z"}, {"uuid": "37ffe8d0-c8a1-4e2a-b1db-d309812b3f3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59887", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5to6wxdf2t", "content": "CVE-2026-59887 - linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text\nCVE ID : CVE-2026-59887\n \n Published : July 8, 2026, 5:17 p.m. | 31\u00a0minutes ago\n \n Description : linkify-it is a links recognition library with full Unicode support. Pr...", "creation_timestamp": "2026-07-08T19:21:00.632168Z"}, {"uuid": "3cd3c4ac-8ab0-45ec-860e-158d9b3064ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59883", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5tsoicmx2x", "content": "CVE-2026-59883 - Guzzle: Cookie Disclosure and Injection via IP-Address Domains\nCVE ID : CVE-2026-59883\n \n Published : July 8, 2026, 5:17 p.m. | 31\u00a0minutes ago\n \n Description : Guzzle is an extensible PHP HTTP client. Prior to 7.12.3, CookieJar did not restrict cookies scoped ...", "creation_timestamp": "2026-07-08T19:23:30.450274Z"}, {"uuid": "82f1db76-52f0-46d3-8811-b5a763a83343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59882", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5urdn5uw2z", "content": "CVE-2026-59882 - guzzlehttp/psr7: Host Confusion via Weak URI Host Validation\nCVE ID : CVE-2026-59882\n \n Published : July 8, 2026, 5:17 p.m. | 31\u00a0minutes ago\n \n Description : guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Prior to 2.12.3, Uri::assertVal...", "creation_timestamp": "2026-07-08T19:40:39.423822Z"}, {"uuid": "4a102df1-07a7-40fa-9297-fa842f4f1575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59887", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mq6u5ij4ws2n", "content": "CVE-2026-59887 - ReDoS in linkify-it library. Malicious mailto: inputs cause O(n^2) CPU consumption. CVSS 7.5. No patch available. Update to 5.0.2. #CVE #JavaScript #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-59887/", "creation_timestamp": "2026-07-09T05:02:17.217428Z"}, {"uuid": "5b91ec24-a223-461b-abc3-ba270515cf79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59880", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqeb3l7qsu26", "content": "\ud83d\udccc CVE-2026-59880 - Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, Immutable.Map and Immutable.Set keep keys that share the sa... https://www.cyberhub.blog/cves/CVE-2026-59880", "creation_timestamp": "2026-07-11T08:37:06.160634Z"}, {"uuid": "1d2db7cc-9b31-41b6-a706-3d5ffacff9d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59883", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkatpltbc2e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-59883 \u0432 Guzzle: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/C2D085F2-02D0-47B6-8EA3-BA37DFB89D58", "creation_timestamp": "2026-07-13T17:48:40.645460Z"}, {"uuid": "89218e36-97ad-48a1-a296-46f83421dfdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59883", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrkrlvox2z", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d4 \u05d7\u05de\u05d5\u05e8\u05d4 \u05d1\u05d2\u05d5\u05d6\u05dc - CVE-2026-59883 \u05d5\u05de\u05d4 \u05d6\u05d4 \u05d0\u05d5\u05de\u05e8 \u05dc\u05da\n\n\n\nhttps://khesef.xyz/posts/AFDF0DC6-73F8-4E0A-ACA4-38FB728F4E79", "creation_timestamp": "2026-07-16T08:03:53.113722Z"}, {"uuid": "847b597a-d1ff-44c7-8e33-73b4b73dba3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59885", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqtc4kcbi523", "content": "CVE-2026-59885: Denial of Service Risk Through Quadratic Complexity in pyasn1 #CyberSecurity #Vulnerability #CVE", "creation_timestamp": "2026-07-17T08:05:29.009296Z"}, {"uuid": "b23e9842-af3e-460e-b72e-b895a5356fa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59885", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqtc6dlakl2h", "content": "CVE-2026-59885: Pyasn1's Quadratic Complexity Is a Debugger's Nightmare #CVE #CyberSecurity #Vulnerability", "creation_timestamp": "2026-07-17T08:06:29.364899Z"}, {"uuid": "b8f936fd-fe4d-48a0-a1f4-8be6458b08f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59885", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqtc6fked72z", "content": "CVE-2026-59885: Mitigation Strategies or Exploit Opportunities? #CVE2026 #CyberSecurity #Vulnerability", "creation_timestamp": "2026-07-17T08:06:31.119001Z"}, {"uuid": "90e28d30-59d9-441d-b444-ee9d84772479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59883", "type": "seen", "source": "https://gist.github.com/alon710/afd4e223ed1d8cf62007fc8baac9d771", "content": "# CVE-2026-59883: CVE-2026-59883: Cookie Disclosure and Injection via IP-Address Domains in Guzzle HTTP Client\n\n> **CVSS Score:** 4.7\n> **Published:** 2026-07-20\n> **Full Report:** https://cvereports.com/reports/CVE-2026-59883\n\n## Summary\nGuzzle HTTP Client prior to version 7.12.3 contains a logical flaw in its CookieJar component. The client fails to properly validate the host types of stored cookie domain attributes before applying standard suffix-matching logic. As a consequence, sensitive session cookies scoped to an IP address (e.g., 192.168.0.1) can be leaked to malicious, look-alike hostnames (e.g., evil.192.168.0.1). This vulnerability permits cross-host cookie disclosure, cookie injection, and session fixation attacks.\n\n## TL;DR\nGuzzle HTTP Client before version 7.12.3 incorrectly applies suffix matching to cookie domains scoped to literal IP addresses, allowing sensitive cookies to be leaked to unauthorized look-alike subdomains.\n\n## Technical Details\n\n- **CWE ID**: CWE-346 (Origin Validation Error)\n- **Attack Vector**: Network\n- **CVSS v3.1**: 4.7\n- **EPSS Score**: 0.00115\n- **Impact**: Cross-Host Cookie Disclosure / Injection\n- **Exploit Status**: none\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Guzzle HTTP Client (PHP Package: guzzlehttp/guzzle)\n- **guzzlehttp/guzzle**: < 7.12.3 (Fixed in: `7.12.3`)\n\n## Mitigation\n\n- Upgrade Guzzle HTTP Client to version 7.12.3 or later\n- Disable CookieJar middleware when making requests targeting raw IP addresses\n- Implement a custom PSR-7 middleware to strip the domain attribute from Set-Cookie headers targeting raw IP addresses\n\n**Remediation Steps:**\n1. Open a terminal in your project root containing the Composer configuration.\n2. Execute the command: composer update guzzlehttp/guzzle\n3. Verify the upgrade by executing: composer show guzzlehttp/guzzle\n4. Confirm the installed version is 7.12.3 or higher.\n\n## References\n\n- [GHSA-g446-98w2-8p5w: Cookie disclosure and injection via IP-address domains](https://github.com/guzzle/guzzle/security/advisories/GHSA-g446-98w2-8p5w)\n- [Guzzle Fix Commit](https://github.com/guzzle/guzzle/commit/b9944c161b12d9ee9c9334cfc5b9659ecd7451f8)\n- [Guzzle Pull Request 3694](https://github.com/guzzle/guzzle/pull/3694)\n- [Guzzle v7.12.3 Release Notes](https://github.com/guzzle/guzzle/releases/tag/7.12.3)\n- [NVD - CVE-2026-59883 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-59883)\n- [CVE.org - CVE-2026-59883](https://www.cve.org/CVERecord?id=CVE-2026-59883)\n- [Wiz Vulnerability Database: CVE-2026-59883](https://www.wiz.io/vulnerability-database/cve/cve-2026-59883)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-59883) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-20T22:31:01.538383Z"}, {"uuid": "7e9d1b94-026d-4918-8bc6-e134151cb816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59887", "type": "published-proof-of-concept", "source": "https://github.com/markdown-it/linkify-it/security/advisories/GHSA-v245-v573-v5vm", "content": "", "creation_timestamp": "2026-07-21T20:35:13.677499Z"}, {"uuid": "85284c89-410e-4139-8adf-0ed119e489af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59880", "type": "published-proof-of-concept", "source": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-xvcm-6775-5m9r", "content": "", "creation_timestamp": "2026-07-21T20:35:16.277082Z"}, {"uuid": "66b81d11-551e-4153-9701-06c85884ca8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59889", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mr72fj3ek32v", "content": "A flaw in Jackson, the JSON library inside most Java apps, lets a low-privilege user write admin-only fields.\n\nIt hits apps that use Jackson's view feature as a write gate. (CVE-2026-59889)\n\nFix: update to 2.18.9, 2.21.5 or 3.1.5.", "creation_timestamp": "2026-07-22T00:19:16.692320Z"}, {"uuid": "59092239-a792-4b05-a6b4-4f5905e08955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59889", "type": "published-proof-of-concept", "source": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5gvw-p9qm-jgwh", "content": "", "creation_timestamp": "2026-07-22T00:35:03.166122Z"}, {"uuid": "a5b81b43-b883-44ad-bd00-03e1bc1ce457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59884", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrarghsgs22o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-59884 \u0432 pyasn1: \u0443\u0433\u0440\u043e\u0437\u0430 DoS \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0442\u0435\u0433\u043e\u0432\n\n\n\nhttps://kripta.biz/posts/3723A98E-E6DC-4F36-8B5F-527CFA2F1BCD", "creation_timestamp": "2026-07-22T16:44:04.241181Z"}, {"uuid": "ef7b7e00-81b4-4f6f-be7b-e12e4b9b2e16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59886", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrasnz6yqp2o", "content": "\u05ea\u05e7\u05dc\u05d4 \u05d7\u05de\u05d5\u05e8\u05d4 \u05d1\u05e4\u05d9\u05d9\u05ea\u05d5\u05df: CVE-2026-59886 - \u05e6\u05e8\u05d9\u05db\u05ea \u05de\u05e9\u05d0\u05d1\u05d9\u05dd \u05d1\u05dc\u05ea\u05d9 \u05de\u05d5\u05d2\u05d1\u05dc\u05ea \u05d1\u05e2\u05ea \u05d4\u05de\u05e8\u05ea REAL\n\n\n\nhttps://khesef.xyz/posts/0E06FA49-B0D2-49B8-B250-03366516096B", "creation_timestamp": "2026-07-22T17:06:11.211889Z"}, {"uuid": "eb71b73b-bced-42c0-9f5d-e3dee7330f08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59886", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mraso4k6za2m", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-59886 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 pyasn1: \u0443\u0433\u0440\u043e\u0437\u0430 \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432\n\n\n\nhttps://kripta.biz/posts/5CA6B67D-14AA-4F26-B14F-DD405D127816", "creation_timestamp": "2026-07-22T17:06:14.636643Z"}, {"uuid": "98bc42ca-a1d9-4529-9a3d-0d9ab03b40f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59888", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mravquivj32p", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-59888 \u0432 Jackson Databind: \u043e\u0431\u0445\u043e\u0434 @JsonIgnore \u0447\u0435\u0440\u0435\u0437 PropertyNamingStrategy\n\n\n\nhttps://kripta.biz/posts/CB32453F-D912-41CC-AA19-BA3CDD468DD7", "creation_timestamp": "2026-07-22T18:01:28.063272Z"}, {"uuid": "75e7ff12-18f7-411f-be66-c91e469db6c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59880", "type": "seen", "source": "Telegram/3IdoSx-1lpc2iHoFvsp2wYXyVxuQva2z_1gsDIpvcW15f6s", "content": "", "creation_timestamp": "2026-07-23T23:00:03.348813Z"}, {"uuid": "2a4c6aa3-028b-45b7-bad6-7683050c3f60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59880", "type": "seen", "source": "Telegram/3IdoSx-1lpc2iHoFvsp2wYXyVxuQva2z_1gsDIpvcW15f6s", "content": "", "creation_timestamp": "2026-07-24T00:00:07.219054Z"}, {"uuid": "b42672e7-5e33-4960-a6ec-5804117f4af1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59889", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlykngz4q2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-59889 \u0432 Jackson Databind: \u043e\u0431\u0445\u043e\u0434 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438\n\n\n\nhttps://kripta.biz/posts/B6C4B0AF-5703-4E6F-8E8C-9998C8402E03", "creation_timestamp": "2026-07-27T03:50:57.532545Z"}, {"uuid": "9caa1180-d5a0-4ab8-b32e-f35d9119fc1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59889", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrlytkzgsv2m", "content": "\u05d7\u05e9\u05d9\u05e4\u05ea \u05e4\u05d2\u05d9\u05e2\u05d4 \u05e7\u05e9\u05d4 \u05d1-jackson-databind: CVE-2026-59889 - \u05e2\u05e7\u05d9\u05e4\u05ea \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea \u05d1\u05e2\u05ea \u05d3\u05d9\u05e1\u05e8\u05d9\u05d0\u05dc\u05d9\u05d6\u05e6\u05d9\u05d4\n\n\n\nhttps://khesef.xyz/posts/D2B9D11A-38C9-4CAC-BFC9-5E6FA2D13E83", "creation_timestamp": "2026-07-27T03:55:56.964906Z"}]}