<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-05T14:12:59.682732+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/aef1311b-cf10-4139-8926-3f2c173118a3/export</id>
    <title>aef1311b-cf10-4139-8926-3f2c173118a3</title>
    <updated>2026-10-05T14:12:59.712049+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "aef1311b-cf10-4139-8926-3f2c173118a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105222", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx3mpc33tz2z", "content": "\ud83d\udea8 CVE-2026-105222 \u2014 CVSS 9.1 CRITICAL\n\nThe alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by defaul...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105222\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T00:07:22.574023Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/aef1311b-cf10-4139-8926-3f2c173118a3/export"/>
    <published>2026-10-05T00:07:22.574023+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/051c1213-b7c4-426e-bf67-06ae2940c3fa/export</id>
    <title>051c1213-b7c4-426e-bf67-06ae2940c3fa</title>
    <updated>2026-10-05T14:12:59.714275+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "051c1213-b7c4-426e-bf67-06ae2940c3fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105222", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx3mdb6vpx2a", "content": "CRITICAL: alexpechkarev/google-maps v1.0.3 \u2013 12.16 disables TLS cert validation by default. API keys at risk; responses can be altered. Enable ssl_verify_peer=TRUE until a fix. Details: https://radar.offseq.com/threat/cve-2026-105222-improper-certificate-validation-in-alexpechkarev-google-maps-f3...", "creation_timestamp": "2026-10-05T00:00:39.384627Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/051c1213-b7c4-426e-bf67-06ae2940c3fa/export"/>
    <published>2026-10-05T00:00:39.384627+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ca953d72-a8b7-4c14-bda0-65c432aba354/export</id>
    <title>ca953d72-a8b7-4c14-bda0-65c432aba354</title>
    <updated>2026-10-05T14:12:59.714414+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ca953d72-a8b7-4c14-bda0-65c432aba354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105222", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117385359315425699", "content": "CVE-2026-105222: CRITICAL vuln in alexpechkarev/google-maps (v1.0.3 \u2013 12.16). TLS cert checks off by default \u2014 API keys can leak, responses tampered. Set ssl_verify_peer=TRUE. Patch status unknown. https://radar.offseq.com/threat/cve-2026-105222-improper-certificate-validation-in-alexpechkarev-google-maps-f327aeed77a71a14 #OffSeq #Vulnerability #Laravel #CVE2026_105222", "creation_timestamp": "2026-10-05T00:00:37.562377Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ca953d72-a8b7-4c14-bda0-65c432aba354/export"/>
    <published>2026-10-05T00:00:37.562377+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ddc9ded6-9456-48f5-af1a-ba74d2642324/export</id>
    <title>ddc9ded6-9456-48f5-af1a-ba74d2642324</title>
    <updated>2026-10-05T14:12:59.714522+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ddc9ded6-9456-48f5-af1a-ba74d2642324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105222", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2kfy4ksilxt4z", "content": "CVE-2026-105222 - alexpechkarev/google-maps through 12.16 Disabled TLS Certificate Verification via ssl_verify_peer\nCVE ID : CVE-2026-105222\n \n Published : Oct. 4, 2026, 10:31 p.m. | 37\u00a0minutes ago\n \n Description : The alexpechkarev/google-maps Laravel package through 12.16 di...", "creation_timestamp": "2026-10-04T23:39:44.474733Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ddc9ded6-9456-48f5-af1a-ba74d2642324/export"/>
    <published>2026-10-04T23:39:44.474733+00:00</published>
  </entry>
</feed>
