{"uuid": "a0864715-2d0e-44d6-b75f-79ff72bf26df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9317", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mupp7ul4sb2w", "content": "CVE-2026-9317 - nango\nThe Nango service version earlier than 0.71.6 does not check who can start its runner component. Anyone who can reach the runner\u2019s network port can tell it to start and run any JavaScript\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nango #nangohq #CVE #infosec", "creation_timestamp": "2026-09-04T19:30:06.182303Z"}