https://vulnerability.circl.lu/sightings/feed 2026-07-06T18:25:00.093074+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/ebb69180-b815-41dd-bd5c-30ce5614065c/export 2026-07-06T18:25:00.118988+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ebb69180-b815-41dd-bd5c-30ce5614065c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49297", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpxzq23idw2v", "content": "CVE-2026-49297 - Apache Airflow Google provider: Path traversal via GCS object names \u2192 local/SFTP filesystem (GCSToSFTPOperator + GCSTimeSpanFileTransformOperator)\nCVE ID : CVE-2026-49297\n \n Published : July 6, 2026, 11:16 a.m. | 31\u00a0minutes ago\n \n Description : Apache Airflow'...", "creation_timestamp": "2026-07-06T11:53:39.149620Z"} 2026-07-06T11:53:39.149620+00:00 https://vulnerability.circl.lu/sighting/fd373a75-7cc6-49b9-b804-55ec53128f4b/export 2026-07-06T18:25:00.120902+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "fd373a75-7cc6-49b9-b804-55ec53128f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49297", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpsjoi25k323", "content": "CVE-2026-49297: Apache Airflow Google provider: Path traversal via GCS object names \u2192 local/SFTP filesystem (GCSToSFTPOperator + GCSTimeSpanFileTransformOperator)", "creation_timestamp": "2026-07-04T07:22:55.036637Z"} 2026-07-04T07:22:55.036637+00:00 https://vulnerability.circl.lu/sighting/8b4ab1d8-8476-4050-b3fb-75ee08feb585/export 2026-07-06T18:25:00.121098+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "8b4ab1d8-8476-4050-b3fb-75ee08feb585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-49293", "type": "published-proof-of-concept", "source": "https://github.com/sunnyadn/js-toml/security/advisories/GHSA-wp3c-266w-4qfq", "content": "", "creation_timestamp": "2026-06-27T00:35:47.219530Z"} 2026-06-27T00:35:47.219530+00:00 https://vulnerability.circl.lu/sighting/a4b82604-99ca-49f4-89a6-2878f871eada/export 2026-07-06T18:25:00.122435+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "a4b82604-99ca-49f4-89a6-2878f871eada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-49291", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-2r68-g678-7qr3", "content": "", "creation_timestamp": "2026-06-26T22:35:27.339225Z"} 2026-06-26T22:35:27.339225+00:00 https://vulnerability.circl.lu/sighting/98f3eacd-4a05-4c38-9ea4-da24ac257255/export 2026-07-06T18:25:00.122629+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "98f3eacd-4a05-4c38-9ea4-da24ac257255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49293", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mou4vxh2ex2c", "content": "CVE-2026-49293 - High severity DoS in js-toml parser. O(n\u00b2) BigInt operations allow resource exhaustion via crafted TOML input. CVSS 7.5. No patch yet. Update or monitor usage. #CVE #infosec #javascript\n\nhttps://www.valtersit.com/cve/CVE-2026-49293/", "creation_timestamp": "2026-06-22T05:14:35.394347Z"} 2026-06-22T05:14:35.394347+00:00 https://vulnerability.circl.lu/sighting/caadd3ca-6459-42d1-8493-0d0b4112142a/export 2026-07-06T18:25:00.122756+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "caadd3ca-6459-42d1-8493-0d0b4112142a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49295", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moodmsmybf2i", "content": "CVE-2026-49295 - libde265 has an out-of-bounds write in process_reference_picture_set via predicted short-term RPS\nCVE ID : CVE-2026-49295\n \n Published : June 19, 2026, 8:09 p.m. | 1\u00a0hour, 33\u00a0minutes ago\n \n Description : libde265 is an open source implementation of the h.265 v...", "creation_timestamp": "2026-06-19T21:58:46.510536Z"} 2026-06-19T21:58:46.510536+00:00 https://vulnerability.circl.lu/sighting/4224fd12-9f1a-4c26-80bd-07b875e1d39b/export 2026-07-06T18:25:00.122861+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4224fd12-9f1a-4c26-80bd-07b875e1d39b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49298", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mn5o73vqfo2o", "content": "CVE-2026-49298: Apache Airflow: JWT Token Exposure in KubernetesExecutor Command-Line Arguments", "creation_timestamp": "2026-05-31T13:27:29.824600Z"} 2026-05-31T13:27:29.824600+00:00