<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-07-15T14:57:31.647947+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3c348cde-cb67-44e2-b571-c52fb9a10cac/export</id>
    <title>3c348cde-cb67-44e2-b571-c52fb9a10cac</title>
    <updated>2026-07-15T14:57:31.685638+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3c348cde-cb67-44e2-b571-c52fb9a10cac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55574", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqa4npejew2n", "content": "\ud83d\udccc CVE-2026-55574 - vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Prior to 0.24.0, the structured_outputs.regex API parameter pass... https://www.cyberhub.blog/cves/CVE-2026-55574", "creation_timestamp": "2026-07-09T17:07:07.056374Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3c348cde-cb67-44e2-b571-c52fb9a10cac/export"/>
    <published>2026-07-09T17:07:07.056374+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b18424a2-f578-4c72-a48f-3272b9da6156/export</id>
    <title>b18424a2-f578-4c72-a48f-3272b9da6156</title>
    <updated>2026-07-15T14:57:31.692742+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b18424a2-f578-4c72-a48f-3272b9da6156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55575", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq63262wym27", "content": "CVE-2026-55575 - LiquidJS: `pop` filter bypasses `memoryLimit` accounting that its array-filter siblings enforce\nCVE ID : CVE-2026-55575\n \n Published : July 8, 2026, 8:16 p.m. | 58\u00a0minutes ago\n \n Description : LiquidJS is a Shopify / GitHub Pages compatible template engine in ...", "creation_timestamp": "2026-07-08T21:32:58.055779Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b18424a2-f578-4c72-a48f-3272b9da6156/export"/>
    <published>2026-07-08T21:32:58.055779+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/24380e09-a466-404b-b673-830c600af700/export</id>
    <title>24380e09-a466-404b-b673-830c600af700</title>
    <updated>2026-07-15T14:57:31.692833+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "24380e09-a466-404b-b673-830c600af700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55577", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqnhpwqp52f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55577 \u0432 ImageMagick: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/0C557DEC-0F30-40BA-9834-BA8A9642BBDD", "creation_timestamp": "2026-07-03T13:25:23.957559Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/24380e09-a466-404b-b673-830c600af700/export"/>
    <published>2026-07-03T13:25:23.957559+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4490a086-132f-4448-96df-9562a46812c8/export</id>
    <title>4490a086-132f-4448-96df-9562a46812c8</title>
    <updated>2026-07-15T14:57:31.692904+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4490a086-132f-4448-96df-9562a46812c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55577", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnxuqsmjt2n", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55577 \u0432 ImageMagick: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/3DAA2BAB-1690-4A1A-94AC-8077FE847EE5", "creation_timestamp": "2026-07-02T11:53:58.433996Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4490a086-132f-4448-96df-9562a46812c8/export"/>
    <published>2026-07-02T11:53:58.433996+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a59392e1-b68d-41f6-8b4b-7c570e446eb3/export</id>
    <title>a59392e1-b68d-41f6-8b4b-7c570e446eb3</title>
    <updated>2026-07-15T14:57:31.692966+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a59392e1-b68d-41f6-8b4b-7c570e446eb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55577", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnt3c4ngk2r", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55577 \u0432 ImageMagick: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/589ABDB3-1FF3-429C-989E-1A131BA85619", "creation_timestamp": "2026-07-02T10:27:49.937608Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a59392e1-b68d-41f6-8b4b-7c570e446eb3/export"/>
    <published>2026-07-02T10:27:49.937608+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0af8bcfa-20d4-4ebf-9dc4-53c6b3fa3d96/export</id>
    <title>0af8bcfa-20d4-4ebf-9dc4-53c6b3fa3d96</title>
    <updated>2026-07-15T14:57:31.693030+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0af8bcfa-20d4-4ebf-9dc4-53c6b3fa3d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55577", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpmcy6rdbd27", "content": "CVE-2026-55577 - ImageMagick: Heap Buffer Overflow in ImageMagick MVG decoder\nCVE ID : CVE-2026-55577\n \n Published : July 1, 2026, 6:56 p.m. | 50\u00a0minutes ago\n \n Description : ImageMagick is free and open-source software used for editing and manipulating digital images. Prior t...", "creation_timestamp": "2026-07-01T20:07:06.532345Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0af8bcfa-20d4-4ebf-9dc4-53c6b3fa3d96/export"/>
    <published>2026-07-01T20:07:06.532345+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b7919bb2-668a-4f11-9f66-54e166dce529/export</id>
    <title>b7919bb2-668a-4f11-9f66-54e166dce529</title>
    <updated>2026-07-15T14:57:31.693093+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b7919bb2-668a-4f11-9f66-54e166dce529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55570", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp3cbffawf2p", "content": "CVE-2026-55570 - SiYuan: Stored XSS results to Electron RCE in SiYuan marketplace via unescaped `data-obj` attribute (Bypass for CVE-2026-45375's patch)\nCVE ID : CVE-2026-55570\n \n Published : June 24, 2026, 9:24 p.m. | 3\u00a0hours, 46\u00a0minutes ago\n \n Description : SiYuan is an open...", "creation_timestamp": "2026-06-25T01:39:07.469839Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b7919bb2-668a-4f11-9f66-54e166dce529/export"/>
    <published>2026-06-25T01:39:07.469839+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b0c4ea43-c9fb-4212-8791-8fae3996fdac/export</id>
    <title>b0c4ea43-c9fb-4212-8791-8fae3996fdac</title>
    <updated>2026-07-15T14:57:31.693155+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b0c4ea43-c9fb-4212-8791-8fae3996fdac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-55570", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116808156714813443", "content": "CVE-2026-55570: CRITICAL XSS in SiYuan (&amp;lt;3.7.0) enables arbitrary HTML injection. On the desktop client, attackers can escalate to OS command execution due to nodeIntegration. Upgrade to 3.7.0+ now! https://radar.offseq.com/threat/cve-2026-55570-cwe-79-improper-neutralization-of-i-34ddb800ffc94efb #OffSeq #XSS #Vuln #SiYuan", "creation_timestamp": "2026-06-25T01:30:35.953530Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b0c4ea43-c9fb-4212-8791-8fae3996fdac/export"/>
    <published>2026-06-25T01:30:35.953530+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a548eb92-562e-4d8c-996d-de6243a8dca7/export</id>
    <title>a548eb92-562e-4d8c-996d-de6243a8dca7</title>
    <updated>2026-07-15T14:57:31.693216+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a548eb92-562e-4d8c-996d-de6243a8dca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-55570", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mp3brvvwqm2f", "content": "CRITICAL: SiYuan &amp;lt;3.7.0 vulnerable to XSS (CVE-2026-55570) \u2014 desktop client can be fully compromised via OS command execution. Update to 3.7.0+ now. https://radar.offseq.com/threat/cve-2026-55570-cwe-79-improper-neutralization-of-i-34ddb800ffc94efb #OffSeq #XSS #SiYuan", "creation_timestamp": "2026-06-25T01:30:27.519110Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a548eb92-562e-4d8c-996d-de6243a8dca7/export"/>
    <published>2026-06-25T01:30:27.519110+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/616524d6-76b7-4ffd-a861-31152e8068ae/export</id>
    <title>616524d6-76b7-4ffd-a861-31152e8068ae</title>
    <updated>2026-07-15T14:57:31.693276+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "616524d6-76b7-4ffd-a861-31152e8068ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5557", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miqqd6o6pl25", "content": "", "creation_timestamp": "2026-04-05T12:20:11.461395Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/616524d6-76b7-4ffd-a861-31152e8068ae/export"/>
    <published>2026-04-05T12:20:11.461395+00:00</published>
  </entry>
</feed>
