<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 05 Oct 2026 11:45:10 +0000</lastBuildDate>
    <item>
      <title>8b1c052b-a1ff-4481-901a-195eb0df52ab</title>
      <link>https://vulnerability.circl.lu/sighting/8b1c052b-a1ff-4481-901a-195eb0df52ab/export</link>
      <description>{"uuid": "8b1c052b-a1ff-4481-901a-195eb0df52ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105221", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx3weseoya2m", "content": "CVE-2026-105221: gist RubyGem &amp;lt;6.1.0 has a CRITICAL SSL validation flaw. Attackers can steal GitHub credentials via intercepted API traffic. Upgrade to 6.1.0+ ASAP. https://radar.offseq.com/threat/cve-2026-105221-improper-certificate-validation-in-defunkt-gist-a4b1b7125f9195f8 #OffSeq #CVE2026105...", "creation_timestamp": "2026-10-05T03:00:29.049686Z"}</description>
      <content:encoded>{"uuid": "8b1c052b-a1ff-4481-901a-195eb0df52ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105221", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx3weseoya2m", "content": "CVE-2026-105221: gist RubyGem &amp;lt;6.1.0 has a CRITICAL SSL validation flaw. Attackers can steal GitHub credentials via intercepted API traffic. Upgrade to 6.1.0+ ASAP. https://radar.offseq.com/threat/cve-2026-105221-improper-certificate-validation-in-defunkt-gist-a4b1b7125f9195f8 #OffSeq #CVE2026105...", "creation_timestamp": "2026-10-05T03:00:29.049686Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8b1c052b-a1ff-4481-901a-195eb0df52ab/export</guid>
      <pubDate>Mon, 05 Oct 2026 03:00:29 +0000</pubDate>
    </item>
    <item>
      <title>5888586a-0daa-4ef0-82dc-07f8ef98792f</title>
      <link>https://vulnerability.circl.lu/sighting/5888586a-0daa-4ef0-82dc-07f8ef98792f/export</link>
      <description>{"uuid": "5888586a-0daa-4ef0-82dc-07f8ef98792f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105221", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117386066373169204", "content": "CRITICAL: gist RubyGem versions 4.0.0 \u2013 &amp;lt;6.1.0 vulnerable to improper cert validation (CVE-2026-105221). SSL verification is disabled, exposing GitHub creds to on-path attackers. Patch to 6.1.0+ now! https://radar.offseq.com/threat/cve-2026-105221-improper-certificate-validation-in-defunkt-gist-a4b1b7125f9195f8 #OffSeq #CVE2026105221 #RubyGems #infosec", "creation_timestamp": "2026-10-05T03:00:26.403560Z"}</description>
      <content:encoded>{"uuid": "5888586a-0daa-4ef0-82dc-07f8ef98792f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105221", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117386066373169204", "content": "CRITICAL: gist RubyGem versions 4.0.0 \u2013 &amp;lt;6.1.0 vulnerable to improper cert validation (CVE-2026-105221). SSL verification is disabled, exposing GitHub creds to on-path attackers. Patch to 6.1.0+ now! https://radar.offseq.com/threat/cve-2026-105221-improper-certificate-validation-in-defunkt-gist-a4b1b7125f9195f8 #OffSeq #CVE2026105221 #RubyGems #infosec", "creation_timestamp": "2026-10-05T03:00:26.403560Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5888586a-0daa-4ef0-82dc-07f8ef98792f/export</guid>
      <pubDate>Mon, 05 Oct 2026 03:00:26 +0000</pubDate>
    </item>
    <item>
      <title>6d32de2c-5035-410e-8dbe-e1f28c544de5</title>
      <link>https://vulnerability.circl.lu/sighting/6d32de2c-5035-410e-8dbe-e1f28c544de5/export</link>
      <description>{"uuid": "6d32de2c-5035-410e-8dbe-e1f28c544de5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105221", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx3mp25wbz2z", "content": "\ud83d\udea8 CVE-2026-105221 \u2014 CVSS 9.1 CRITICAL\n\nThe gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105221\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T00:07:14.312081Z"}</description>
      <content:encoded>{"uuid": "6d32de2c-5035-410e-8dbe-e1f28c544de5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105221", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx3mp25wbz2z", "content": "\ud83d\udea8 CVE-2026-105221 \u2014 CVSS 9.1 CRITICAL\n\nThe gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105221\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T00:07:14.312081Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6d32de2c-5035-410e-8dbe-e1f28c544de5/export</guid>
      <pubDate>Mon, 05 Oct 2026 00:07:14 +0000</pubDate>
    </item>
    <item>
      <title>7bfb9b51-8aca-4749-b08f-568b897f8cea</title>
      <link>https://vulnerability.circl.lu/sighting/7bfb9b51-8aca-4749-b08f-568b897f8cea/export</link>
      <description>{"uuid": "7bfb9b51-8aca-4749-b08f-568b897f8cea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105221", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gnml3k5zl2dyu", "content": "CVE-2026-105221 - Gist RubyGem before 6.1.0 Disabled TLS Certificate Verification\nCVE ID : CVE-2026-105221\n \n Published : Oct. 4, 2026, 10:31 p.m. | 37\u00a0minutes ago\n \n Description : The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that all...", "creation_timestamp": "2026-10-04T23:45:44.294185Z"}</description>
      <content:encoded>{"uuid": "7bfb9b51-8aca-4749-b08f-568b897f8cea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105221", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gnml3k5zl2dyu", "content": "CVE-2026-105221 - Gist RubyGem before 6.1.0 Disabled TLS Certificate Verification\nCVE ID : CVE-2026-105221\n \n Published : Oct. 4, 2026, 10:31 p.m. | 37\u00a0minutes ago\n \n Description : The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that all...", "creation_timestamp": "2026-10-04T23:45:44.294185Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7bfb9b51-8aca-4749-b08f-568b897f8cea/export</guid>
      <pubDate>Sun, 04 Oct 2026 23:45:44 +0000</pubDate>
    </item>
  </channel>
</rss>
