<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-01T20:43:14.426800+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/036d1fe3-6669-4e9c-9875-054b4196f3a3/export</id>
    <title>036d1fe3-6669-4e9c-9875-054b4196f3a3</title>
    <updated>2026-10-01T20:43:14.450140+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "036d1fe3-6669-4e9c-9875-054b4196f3a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93711", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117357871455951908", "content": "CVE-2026-93711 Dancer2 before 2.2.0 fails to strip CRLF from response header names, enabling header injection when names come from request data. CVSS 6.5. Patch under review. Audit your Perl apps now. https://www.valtersit.com/cve/CVE-2026-93711/ #CVE #infosec #Perl", "creation_timestamp": "2026-09-30T03:30:07.893269Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/036d1fe3-6669-4e9c-9875-054b4196f3a3/export"/>
    <published>2026-09-30T03:30:07.893269+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/23f5d067-a3f3-4fce-b099-0122505dce8a/export</id>
    <title>23f5d067-a3f3-4fce-b099-0122505dce8a</title>
    <updated>2026-10-01T20:43:14.456216+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "23f5d067-a3f3-4fce-b099-0122505dce8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93711", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwpfp64zjn27", "content": "CVE-2026-93711 Dancer2 before 2.2.0 fails to strip CRLF from response header names, enabling header injection when names come from request data. CVSS 6.5. Patch under review. Audit your Perl apps now. https://www.valtersit.com/cve/CVE-2026-93711/ #CVE #infosec #Perl", "creation_timestamp": "2026-09-30T03:30:05.297158Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/23f5d067-a3f3-4fce-b099-0122505dce8a/export"/>
    <published>2026-09-30T03:30:05.297158+00:00</published>
  </entry>
</feed>
