https://vulnerability.circl.lu/sightings/feed 2026-07-10T05:17:03.096221+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/9cd59299-36d8-49c5-b0fa-3ac161557a11/export 2026-07-10T05:17:03.116217+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9cd59299-36d8-49c5-b0fa-3ac161557a11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59195", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mq2akkns5g2g", "content": "CVE-2026-59195 - Path Traversal in pnpm. Malicious lockfile can create symlinks outside expected directory. CVSS 8.2. Update to 10.34.4 or 11.8.0 immediately. #CVE #pnpm #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-59195/", "creation_timestamp": "2026-07-07T09:00:57.706747Z"} 2026-07-07T09:00:57.706747+00:00 https://vulnerability.circl.lu/sighting/ec8a7115-e778-460f-8e02-e2f6685680af/export 2026-07-10T05:17:03.118872+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ec8a7115-e778-460f-8e02-e2f6685680af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59195", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpyiac7bhz2h", "content": "CVE-2026-59195 - pnpm: Path traversal in configDependencies env lockfile allows symlink creation outside node_modules/.pnpm-config\nCVE ID : CVE-2026-59195\n \n Published : July 6, 2026, 3:21 p.m. | 27\u00a0minutes ago\n \n Description : pnpm is a package manager. Prior to 10.34.4 and 1...", "creation_timestamp": "2026-07-06T16:13:06.107423Z"} 2026-07-06T16:13:06.107423+00:00