https://vulnerability.circl.lu/sightings/feed 2026-06-25T15:17:20.683213+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/fa614ba4-7aca-4be8-b19c-ca2a1b4a436a/export 2026-06-25T15:17:20.703180+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "fa614ba4-7aca-4be8-b19c-ca2a1b4a436a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-23879", "type": "published-proof-of-concept", "source": "https://github.com/miurahr/py7zr/security/advisories/GHSA-q6rc-2cgv-63h7", "content": "", "creation_timestamp": "2026-06-19T09:31:59.000000Z"} 2026-06-19T09:31:59+00:00 https://vulnerability.circl.lu/sighting/cab1d463-b341-48fe-b1d0-8f472bfca05c/export 2026-06-25T15:17:20.703054+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "cab1d463-b341-48fe-b1d0-8f472bfca05c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23879", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mp2wxlnzkj2d", "content": "py7zr 1.1.2\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3001\u60aa\u610f\u306e\u3042\u308b\u30b7\u30f3\u30dc\u30ea\u30c3\u30af\u30ea\u30f3\u30af\u30c1\u30a7\u30fc\u30f3\u306b\u3088\u308a\u3001\u30a2\u30fc\u30ab\u30a4\u30d6\u5185\u306e\u30d5\u30a1\u30a4\u30eb\u304c\u6307\u5b9a\u5916\u306e\u5834\u6240\u306b\u66f8\u304d\u8fbc\u307e\u308c\u308b\u8106\u5f31\u6027\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306a\u3069\u306e\u88ab\u5bb3\u3092\u53d7\u3051\u308b\u53ef\u80fd\u6027\u2026\nCVE-2026-23879 CVSS 8.0 | HIGH", "creation_timestamp": "2026-06-24T22:16:45.627156Z"} 2026-06-24T22:16:45.627156+00:00 https://vulnerability.circl.lu/sighting/b9ab550b-88be-4908-879f-0589ad657b1a/export 2026-06-25T15:17:20.701126+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b9ab550b-88be-4908-879f-0589ad657b1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23879", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mp326xv2w62h", "content": "CVE-2026-23879 - Critical RCE in Py7zr. Arbitrary file write via symbolic link chains allows escape from destination directory. CVSS 8.0. No patch available. Update or avoid extraction of untrusted 7z archives. #CVE #infosec #Python\n\nhttps://www.valtersit.com/cve/CVE-2026-23879/", "creation_timestamp": "2026-06-24T23:14:35.029665Z"} 2026-06-24T23:14:35.029665+00:00