{"vulnerability": "cve-2026-6338", "sightings": [{"uuid": "98ae3cb3-61bf-4df6-90d6-a6a1b002b69f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63382", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtnlvhe4442m", "content": "CVE-2026-63382\nThe libevent library used for processing web traffic can misinterpret certain HTTP headers and line breaks. This mistake can let a remote attacker send hidden extra requests, possibly bypassing security checks\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T06:00:04.481742Z"}, {"uuid": "8568a8d9-af53-4cd7-b272-b3be780439bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63385", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtnmhcjcoy2p", "content": "CVE-2026-63385\nOlder versions of the Libevent library can mishandle specially crafted web requests. By using hidden characters in a URL or header, attackers may trick the software into skipping security checks, potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T06:10:03.707951Z"}, {"uuid": "c2565005-c197-4e5d-bc96-6dc4d67bb742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63382", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjyrwrc6p2e", "content": "CVE-2026-63382 - libevent\nVersions of the libevent library before the latest updates may mishandle certain HTTP headers, allowing a remote attacker to slip an additional hidden request past a proxy. This can let\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#libevent #CVE #infosec", "creation_timestamp": "2026-08-20T19:40:06.850865Z"}, {"uuid": "bdf435f1-d9f1-4418-a543-a7f9f3393367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63385", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjzdqug2n2c", "content": "CVE-2026-63385\nOlder versions of the Libevent library can treat specially coded characters in web requests incorrectly. This can cause parts of a URL to be cut off or headers to be read differently, potentially letting\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-20T19:50:04.037014Z"}, {"uuid": "954167dd-f2af-4534-a2cf-8a3393d923a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63385", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtnx32ot4m2p", "content": "CVE-2026-63385 - libevent\nThe Libevent library used for handling network events may treat specially encoded characters in web addresses as actual null bytes, causing parts of the address to be cut\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#libevent #debian #Debian12 #CVE #infosec", "creation_timestamp": "2026-08-22T09:20:04.059718Z"}, {"uuid": "60e5411a-e2b1-490b-8fbc-9c50e93b5f44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63382", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtk2dhft6o2f", "content": "\ud83d\udea8 CVE-2026-63382 \u2014 CVSS 9.2 CRITICAL\n\nLibevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, the libevent evhttp parser in h...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-63382\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T20:07:47.682010Z"}, {"uuid": "f78446e0-08b4-403e-99da-395897fbb598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63385", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtk2dpdykp2p", "content": "\ud83d\udea8 CVE-2026-63385 \u2014 CVSS 9.2 CRITICAL\n\nLibevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has two HTTP parsing w...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-63385\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T20:07:55.960675Z"}]}