<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 28 Sep 2026 07:45:35 +0000</lastBuildDate>
    <item>
      <title>d41c4cee-4be8-473c-be4d-882012cb2fa0</title>
      <link>https://vulnerability.circl.lu/sighting/d41c4cee-4be8-473c-be4d-882012cb2fa0/export</link>
      <description>{"uuid": "d41c4cee-4be8-473c-be4d-882012cb2fa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100864", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwiszvgvvn2u", "content": "CVE-2026-100864 - heym\nVersions of heym before 0.0.91 let anyone with a valid account craft special expressions that break out of the sandbox and run any Python command on the server. This could let an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#heym #heymrun #CVE #infosec", "creation_timestamp": "2026-09-27T12:40:05.677753Z"}</description>
      <content:encoded>{"uuid": "d41c4cee-4be8-473c-be4d-882012cb2fa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100864", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwiszvgvvn2u", "content": "CVE-2026-100864 - heym\nVersions of heym before 0.0.91 let anyone with a valid account craft special expressions that break out of the sandbox and run any Python command on the server. This could let an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#heym #heymrun #CVE #infosec", "creation_timestamp": "2026-09-27T12:40:05.677753Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d41c4cee-4be8-473c-be4d-882012cb2fa0/export</guid>
      <pubDate>Sun, 27 Sep 2026 12:40:05 +0000</pubDate>
    </item>
    <item>
      <title>cf9cf683-2d5f-432e-9c81-8d2b23a31667</title>
      <link>https://vulnerability.circl.lu/sighting/cf9cf683-2d5f-432e-9c81-8d2b23a31667/export</link>
      <description>{"uuid": "cf9cf683-2d5f-432e-9c81-8d2b23a31667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100864", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhr2iucl32d", "content": "\ud83d\udfe0 CVE-2026-100864 - High (8.8)\n\nheym before 0.0.91 contains a sandbox escape vulnerability in the expression engine's DotList map...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100864/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-27T02:32:00.537613Z"}</description>
      <content:encoded>{"uuid": "cf9cf683-2d5f-432e-9c81-8d2b23a31667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100864", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhr2iucl32d", "content": "\ud83d\udfe0 CVE-2026-100864 - High (8.8)\n\nheym before 0.0.91 contains a sandbox escape vulnerability in the expression engine's DotList map...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100864/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-27T02:32:00.537613Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cf9cf683-2d5f-432e-9c81-8d2b23a31667/export</guid>
      <pubDate>Sun, 27 Sep 2026 02:32:00 +0000</pubDate>
    </item>
  </channel>
</rss>
