https://vulnerability.circl.lu/sightings/feed 2026-09-26T23:57:23.515177+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/99da4989-9caa-410b-9066-4721cb795298/export 2026-09-26T23:57:23.542614+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "99da4989-9caa-410b-9066-4721cb795298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84890", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvcp6pq4qd2t", "content": "CVE-2026-84890: undici decompression bomb risk. Malicious upstream can expand tiny payloads to hundreds of MB, exhausting client memory. CVSS 5.9. Patch status unknown\u2014review your undici usage and add limits if possible. Details: https://www.valtersit.com/cve/CVE-2026-84890/ #CVE", "creation_timestamp": "2026-09-12T08:50:03.198795Z"} 2026-09-12T08:50:03.198795+00:00 https://vulnerability.circl.lu/sighting/910f7e05-7b5e-4e1d-b158-c5e3e9de8b9a/export 2026-09-26T23:57:23.545327+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "910f7e05-7b5e-4e1d-b158-c5e3e9de8b9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84890", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117257168610414149", "content": "CVE-2026-84890: undici decompression bomb risk. Malicious upstream can expand tiny payloads to hundreds of MB, exhausting client memory. CVSS 5.9. Patch status unknown\u2014review your undici usage and add limits if possible. Details: https://www.valtersit.com/cve/CVE-2026-84890/ #CVE", "creation_timestamp": "2026-09-12T08:40:06.702752Z"} 2026-09-12T08:40:06.702752+00:00 https://vulnerability.circl.lu/sighting/46de0012-8358-4a29-920e-54dedca97f99/export 2026-09-26T23:57:23.545446+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "46de0012-8358-4a29-920e-54dedca97f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84890", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3muph6jb6xk2w", "content": "\ud83d\udea8 Moderate-severity security fix in undici (7.29.1, 8.10.2) just released!\n\nPatches CVE-2026-84890: undici vulnerable to Denial of Service via unbounded decompression of compressed responses\n\ngithub.com/nodejs/undic...", "creation_timestamp": "2026-09-04T17:06:12.602890Z"} 2026-09-04T17:06:12.602890+00:00