{"vulnerability": "cve-2026-5993", "sightings": [{"uuid": "264fd559-c828-40c7-8f5e-b0d06aefec58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5993", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj4ckbfbpr22", "content": "", "creation_timestamp": "2026-04-10T02:45:33.744461Z"}, {"uuid": "e2b74f06-4e2f-4503-b83f-736ba2a68b40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5993", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4ngzcjge2p", "content": "", "creation_timestamp": "2026-04-10T06:00:36.061724Z"}, {"uuid": "5c625c96-8319-4c12-a141-9ad48dbd93a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5993", "type": "published-proof-of-concept", "source": "Telegram/Fvik4eX2xz-nzJuB7IaHT1kkv6IwgWipFYk1oHJ2HiAA0EI", "content": "", "creation_timestamp": "2026-04-10T03:17:30.000000Z"}, {"uuid": "d37b19a4-e12d-4d17-b20a-35c2b164bacd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59930", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5swao4cw2w", "content": "CVE-2026-59930 - Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id=\"toc_N\"` content\nCVE ID : CVE-2026-59930\n \n Published : July 8, 2026, 5:17 p.m. | 31\u00a0minutes ago\n \n De...", "creation_timestamp": "2026-07-08T19:07:36.447084Z"}, {"uuid": "95a5237f-6ec4-4649-9551-2c1e241ea7c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59937", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5sz3djzo2i", "content": "CVE-2026-59937 - pypdf: Possible long runtimes for repeated malformed cross-reference entries\nCVE ID : CVE-2026-59937\n \n Published : July 8, 2026, 5:25 p.m. | 23\u00a0minutes ago\n \n Description : pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker ...", "creation_timestamp": "2026-07-08T19:09:11.548726Z"}, {"uuid": "ac360045-bc43-4393-8d2a-c6f25ace7a35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59938", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5v2c2eya2t", "content": "CVE-2026-59938 - pypdf: Possible large memory usage for wrong image dimensions\nCVE ID : CVE-2026-59938\n \n Published : July 8, 2026, 5:24 p.m. | 24\u00a0minutes ago\n \n Description : pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF...", "creation_timestamp": "2026-07-08T19:45:39.831711Z"}, {"uuid": "cf298aa1-c097-453f-8f4e-594db76af16b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59936", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq637k3iih2w", "content": "CVE-2026-59936 - pypdf: Possible infinite loop for not terminated inline images\nCVE ID : CVE-2026-59936\n \n Published : July 8, 2026, 8:16 p.m. | 58\u00a0minutes ago\n \n Description : pypdf is a free and open-source pure-python PDF library. Prior to 6.14.1, an attacker can craft a PD...", "creation_timestamp": "2026-07-08T21:36:01.765960Z"}, {"uuid": "b0fb2f18-af33-4f2f-bfa7-f5b178419c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59935", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq64xsux7c24", "content": "CVE-2026-59935 - pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)\nCVE ID : CVE-2026-59935\n \n Published : July 8, 2026, 8:16 p.m. | 58\u00a0minutes ago\n \n Description : pypdf is a free and open-source pure-python PDF library. Prior to 6.14...", "creation_timestamp": "2026-07-08T22:07:26.598269Z"}, {"uuid": "1c72ab9b-971f-4ca1-9d45-dffd4597cc2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59939", "type": "seen", "source": "https://www.acn.gov.it/portale/w/httplib2-poc-pubblico-per-lo-sfruttamento-della-cve-2026-59939", "content": "Disponibile un Proof of Concept (PoC) per lo sfruttamento della CVE-2026-59939 - gi\u00e0 sanata dal vendor - nella libreria python \u201chttplib2\u201d. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di compromettere la disponibilit\u00e0 del servizio.", "creation_timestamp": "2026-07-09T16:00:46.099956Z"}, {"uuid": "81954a59-23e7-462d-8a1b-818e1e99ae94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59939", "type": "seen", "source": "https://www.acn.gov.it/portale/w/httplib2-poc-pubblico-per-lo-sfruttamento-della-cve-2026-59939", "content": "Disponibile un Proof of Concept (PoC) per lo sfruttamento della CVE-2026-59939 - gi\u00e0 sanata dal vendor - nella libreria python \u201chttplib2\u201d. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di compromettere la disponibilit\u00e0 del servizio.", "creation_timestamp": "2026-07-10T01:00:48.996779Z"}, {"uuid": "fb67d9ac-fba0-4647-9004-4dc4b0f1fdf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59935", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqbllqmplz25", "content": "\ud83d\udccc CVE-2026-59935 - pypdf is a free and open-source pure-python PDF library. Prior to 6.14.2, an attacker can craft a PDF with a page content stream containing a not term... https://www.cyberhub.blog/cves/CVE-2026-59935", "creation_timestamp": "2026-07-10T07:07:07.046426Z"}, {"uuid": "fe81b870-4bcd-4f54-a48e-a8a57d8e6bd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59936", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqbnbfawqa2n", "content": "\ud83d\udccc CVE-2026-59936 - pypdf is a free and open-source pure-python PDF library. Prior to 6.14.1, an attacker can craft a PDF with a page content stream containing a not term... https://www.cyberhub.blog/cves/CVE-2026-59936", "creation_timestamp": "2026-07-10T07:37:06.969429Z"}, {"uuid": "85307981-f38f-44bd-ae85-7fd8dc2f2829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59936", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mqbnmaiacx26", "content": "\ud83d\udccc CVE-2026-59936 - pypdf is a free and open-source pure-python PDF library. Prior to 6.14.1, an attacker can craft a PDF with a page content stream containing a not term... https://www.potatohub.blog/cves/CVE-2026-59936", "creation_timestamp": "2026-07-10T07:43:10.996463Z"}, {"uuid": "11f6fd53-49ae-41f2-9f41-7e0df8b77ec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59930", "type": "published-proof-of-concept", "source": "https://github.com/lepture/mistune/security/advisories/GHSA-2hm2-hc3v-44h9", "content": "", "creation_timestamp": "2026-07-20T22:35:23.219835Z"}, {"uuid": "7b7be676-3fa2-4542-83cf-3c4fc7d75833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59933", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrd5tmlace2i", "content": "A malformed 1 KB spreadsheet can crash PHP apps that use PhpSpreadsheet, the standard library for reading Excel files (CVE-2026-59933).\n\nIt fires during file-type detection, so even .xlsx-only apps are exposed.\n\nNo code execution. Patch now.", "creation_timestamp": "2026-07-23T15:31:30.448626Z"}, {"uuid": "61e40e8a-6961-4122-bfd1-b625a0f58a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59933", "type": "published-proof-of-concept", "source": "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-xh5m-36r6-47m3", "content": "", "creation_timestamp": "2026-07-23T16:35:05.029196Z"}, {"uuid": "c3fe18e7-236d-4518-95c2-675407aa582c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59932", "type": "published-proof-of-concept", "source": "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-2mrg-gjxq-2gvr", "content": "", "creation_timestamp": "2026-07-23T16:35:07.363749Z"}, {"uuid": "859c1e20-7e87-4f85-9bef-c8476156ba51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59931", "type": "published-proof-of-concept", "source": "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-6hq5-7373-42rg", "content": "", "creation_timestamp": "2026-07-23T16:35:09.711417Z"}, {"uuid": "9f44b300-ebc2-48ec-a32d-f7cd779f05da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59939", "type": "published-proof-of-concept", "source": "https://github.com/httplib2/httplib2/security/advisories/GHSA-j5g9-f88f-gfj3", "content": "", "creation_timestamp": "2026-07-24T16:35:19.185295Z"}, {"uuid": "804263ce-e9fa-48bc-8dea-636b91bcd412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59932", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq2uso3v32e", "content": "CVE-2026-59932 - PhpSpreadsheet: Gnumeric reader unbounded gzip expansion causes memory exhaustion\nCVE ID : CVE-2026-59932\n \n Published : July 28, 2026, 5:59 p.m. | 41\u00a0minutes ago\n \n Description : PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. ...", "creation_timestamp": "2026-07-28T18:43:05.888195Z"}, {"uuid": "06623c64-7056-48f8-917e-67d3aea74327", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59931", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrq3udnieo2f", "content": "\ud83d\udfe0 CVE-2026-59931 - High (7.7)\n\nPhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-59931/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-28T19:00:43.848473Z"}, {"uuid": "6ba6d957-4a2f-488a-bcd5-28b3e6922244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59933", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrq3twcref2o", "content": "\ud83d\udfe0 CVE-2026-59933 - High (7.5)\n\nPhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-59933/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-28T19:00:29.484049Z"}, {"uuid": "5390d3ae-d14f-4ea2-a89b-45e390bf3bd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59933", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq5egxnv72i", "content": "CVE-2026-59933 - PhpSpreadsheet: XLS/OLE sector-chain self-loop causes memory exhaustion\nCVE ID : CVE-2026-59933\n \n Published : July 28, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In version...", "creation_timestamp": "2026-07-28T19:27:37.133052Z"}, {"uuid": "ded780ac-7b0a-4a9e-927c-e91e1ae260dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59931", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq5wdv76q22", "content": "CVE-2026-59931 - PhpSpreadsheet: SSRF bypass via HTTP redirect in WEBSERVICE() domain whitelist\nCVE ID : CVE-2026-59931\n \n Published : July 28, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In ...", "creation_timestamp": "2026-07-28T19:37:38.264152Z"}]}