{"vulnerability": "cve-2026-5995", "sightings": [{"uuid": "f20c53b7-b232-4ea5-a814-7b79b2384e8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5995", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116377821414965974", "content": "", "creation_timestamp": "2026-04-10T01:30:29.354757Z"}, {"uuid": "593d194c-5a26-4f90-94b8-001b5e548bdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5995", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mj46e3334v2r", "content": "", "creation_timestamp": "2026-04-10T01:30:31.343112Z"}, {"uuid": "0541d0f4-626a-47a6-b227-b90c65d7b20c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5995", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj4d46c6bh2z", "content": "", "creation_timestamp": "2026-04-10T02:55:37.460215Z"}, {"uuid": "7a059eef-b256-4503-8e09-aaa89ee1b45f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5995", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4ngrojn72j", "content": "", "creation_timestamp": "2026-04-10T06:00:28.712430Z"}, {"uuid": "02783da6-6cac-4a7f-9b00-884dd78e40cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5995", "type": "published-proof-of-concept", "source": "Telegram/Fvik4eX2xz-nzJuB7IaHT1kkv6IwgWipFYk1oHJ2HiAA0EI", "content": "", "creation_timestamp": "2026-04-10T03:17:30.000000Z"}, {"uuid": "7a22f324-7797-4653-8bd3-0aa36b70728f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59952", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrtc4apzxn25", "content": "Valibot <1.4.2 is vulnerable (CVE-2026-59952, MEDIUM) to crashes if attacker-controlled keys shadow Object.prototype methods in validation. Upgrade to 1.4.2+ to prevent DoS. https://radar.offseq.com/threat/cve-2026-59952-cwe-755-improper-handling-of-exceptional-conditions-in-open-circle-valibot-c...", "creation_timestamp": "2026-07-30T01:30:30.633126Z"}, {"uuid": "5ea04730-6be4-4308-8317-8d1781484983", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59950", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqs4lzhdsw2c", "content": "CVE-2026-59950 - python-sdk\nThe MCP Python SDK, used for building applications, had a security weakness that allowed malicious websites to connect to your server without permission. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pythonsdk #modelcontextprotocol #pip #CVE #infosec", "creation_timestamp": "2026-07-16T20:54:05.440973Z"}, {"uuid": "5c6161ab-f4a0-4243-8ac4-ca128fd5b38d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59952", "type": "published-proof-of-concept", "source": "https://github.com/open-circle/valibot/security/advisories/GHSA-5qjj-4xww-7phc", "content": "", "creation_timestamp": "2026-07-24T18:35:24.108080Z"}]}