https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 07:43:39 +0000 https://vulnerability.circl.lu/sighting/ded780ac-7b0a-4a9e-927c-e91e1ae260dc/export {"uuid": "ded780ac-7b0a-4a9e-927c-e91e1ae260dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59931", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq5wdv76q22", "content": "CVE-2026-59931 - PhpSpreadsheet: SSRF bypass via HTTP redirect in WEBSERVICE() domain whitelist\nCVE ID : CVE-2026-59931\n \n Published : July 28, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In ...", "creation_timestamp": "2026-07-28T19:37:38.264152Z"} {"uuid": "ded780ac-7b0a-4a9e-927c-e91e1ae260dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59931", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq5wdv76q22", "content": "CVE-2026-59931 - PhpSpreadsheet: SSRF bypass via HTTP redirect in WEBSERVICE() domain whitelist\nCVE ID : CVE-2026-59931\n \n Published : July 28, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In ...", "creation_timestamp": "2026-07-28T19:37:38.264152Z"} https://vulnerability.circl.lu/sighting/ded780ac-7b0a-4a9e-927c-e91e1ae260dc/export Tue, 28 Jul 2026 19:37:38 +0000 https://vulnerability.circl.lu/sighting/5390d3ae-d14f-4ea2-a89b-45e390bf3bd0/export {"uuid": "5390d3ae-d14f-4ea2-a89b-45e390bf3bd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59933", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq5egxnv72i", "content": "CVE-2026-59933 - PhpSpreadsheet: XLS/OLE sector-chain self-loop causes memory exhaustion\nCVE ID : CVE-2026-59933\n \n Published : July 28, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In version...", "creation_timestamp": "2026-07-28T19:27:37.133052Z"} {"uuid": "5390d3ae-d14f-4ea2-a89b-45e390bf3bd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59933", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq5egxnv72i", "content": "CVE-2026-59933 - PhpSpreadsheet: XLS/OLE sector-chain self-loop causes memory exhaustion\nCVE ID : CVE-2026-59933\n \n Published : July 28, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In version...", "creation_timestamp": "2026-07-28T19:27:37.133052Z"} https://vulnerability.circl.lu/sighting/5390d3ae-d14f-4ea2-a89b-45e390bf3bd0/export Tue, 28 Jul 2026 19:27:37 +0000 https://vulnerability.circl.lu/sighting/06623c64-7056-48f8-917e-67d3aea74327/export {"uuid": "06623c64-7056-48f8-917e-67d3aea74327", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59931", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrq3udnieo2f", "content": "\ud83d\udfe0 CVE-2026-59931 - High (7.7)\n\nPhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-59931/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-28T19:00:43.848473Z"} {"uuid": "06623c64-7056-48f8-917e-67d3aea74327", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59931", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrq3udnieo2f", "content": "\ud83d\udfe0 CVE-2026-59931 - High (7.7)\n\nPhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-59931/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-28T19:00:43.848473Z"} https://vulnerability.circl.lu/sighting/06623c64-7056-48f8-917e-67d3aea74327/export Tue, 28 Jul 2026 19:00:43 +0000 https://vulnerability.circl.lu/sighting/6ba6d957-4a2f-488a-bcd5-28b3e6922244/export {"uuid": "6ba6d957-4a2f-488a-bcd5-28b3e6922244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59933", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrq3twcref2o", "content": "\ud83d\udfe0 CVE-2026-59933 - High (7.5)\n\nPhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-59933/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-28T19:00:29.484049Z"} {"uuid": "6ba6d957-4a2f-488a-bcd5-28b3e6922244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59933", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrq3twcref2o", "content": "\ud83d\udfe0 CVE-2026-59933 - High (7.5)\n\nPhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-59933/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-28T19:00:29.484049Z"} https://vulnerability.circl.lu/sighting/6ba6d957-4a2f-488a-bcd5-28b3e6922244/export Tue, 28 Jul 2026 19:00:29 +0000 https://vulnerability.circl.lu/sighting/804263ce-e9fa-48bc-8dea-636b91bcd412/export {"uuid": "804263ce-e9fa-48bc-8dea-636b91bcd412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59932", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq2uso3v32e", "content": "CVE-2026-59932 - PhpSpreadsheet: Gnumeric reader unbounded gzip expansion causes memory exhaustion\nCVE ID : CVE-2026-59932\n \n Published : July 28, 2026, 5:59 p.m. | 41\u00a0minutes ago\n \n Description : PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. ...", "creation_timestamp": "2026-07-28T18:43:05.888195Z"} {"uuid": "804263ce-e9fa-48bc-8dea-636b91bcd412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59932", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq2uso3v32e", "content": "CVE-2026-59932 - PhpSpreadsheet: Gnumeric reader unbounded gzip expansion causes memory exhaustion\nCVE ID : CVE-2026-59932\n \n Published : July 28, 2026, 5:59 p.m. | 41\u00a0minutes ago\n \n Description : PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. ...", "creation_timestamp": "2026-07-28T18:43:05.888195Z"} https://vulnerability.circl.lu/sighting/804263ce-e9fa-48bc-8dea-636b91bcd412/export Tue, 28 Jul 2026 18:43:05 +0000 https://vulnerability.circl.lu/sighting/9f44b300-ebc2-48ec-a32d-f7cd779f05da/export {"uuid": "9f44b300-ebc2-48ec-a32d-f7cd779f05da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59939", "type": "published-proof-of-concept", "source": "https://github.com/httplib2/httplib2/security/advisories/GHSA-j5g9-f88f-gfj3", "content": "", "creation_timestamp": "2026-07-24T16:35:19.185295Z"} {"uuid": "9f44b300-ebc2-48ec-a32d-f7cd779f05da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59939", "type": "published-proof-of-concept", "source": "https://github.com/httplib2/httplib2/security/advisories/GHSA-j5g9-f88f-gfj3", "content": "", "creation_timestamp": "2026-07-24T16:35:19.185295Z"} https://vulnerability.circl.lu/sighting/9f44b300-ebc2-48ec-a32d-f7cd779f05da/export Fri, 24 Jul 2026 16:35:19 +0000 https://vulnerability.circl.lu/sighting/859c1e20-7e87-4f85-9bef-c8476156ba51/export {"uuid": "859c1e20-7e87-4f85-9bef-c8476156ba51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59931", "type": "published-proof-of-concept", "source": "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-6hq5-7373-42rg", "content": "", "creation_timestamp": "2026-07-23T16:35:09.711417Z"} {"uuid": "859c1e20-7e87-4f85-9bef-c8476156ba51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59931", "type": "published-proof-of-concept", "source": "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-6hq5-7373-42rg", "content": "", "creation_timestamp": "2026-07-23T16:35:09.711417Z"} https://vulnerability.circl.lu/sighting/859c1e20-7e87-4f85-9bef-c8476156ba51/export Thu, 23 Jul 2026 16:35:09 +0000 https://vulnerability.circl.lu/sighting/c3fe18e7-236d-4518-95c2-675407aa582c/export {"uuid": "c3fe18e7-236d-4518-95c2-675407aa582c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59932", "type": "published-proof-of-concept", "source": "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-2mrg-gjxq-2gvr", "content": "", "creation_timestamp": "2026-07-23T16:35:07.363749Z"} {"uuid": "c3fe18e7-236d-4518-95c2-675407aa582c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59932", "type": "published-proof-of-concept", "source": "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-2mrg-gjxq-2gvr", "content": "", "creation_timestamp": "2026-07-23T16:35:07.363749Z"} https://vulnerability.circl.lu/sighting/c3fe18e7-236d-4518-95c2-675407aa582c/export Thu, 23 Jul 2026 16:35:07 +0000 https://vulnerability.circl.lu/sighting/61e40e8a-6961-4122-bfd1-b625a0f58a57/export {"uuid": "61e40e8a-6961-4122-bfd1-b625a0f58a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59933", "type": "published-proof-of-concept", "source": "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-xh5m-36r6-47m3", "content": "", "creation_timestamp": "2026-07-23T16:35:05.029196Z"} {"uuid": "61e40e8a-6961-4122-bfd1-b625a0f58a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59933", "type": "published-proof-of-concept", "source": "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-xh5m-36r6-47m3", "content": "", "creation_timestamp": "2026-07-23T16:35:05.029196Z"} https://vulnerability.circl.lu/sighting/61e40e8a-6961-4122-bfd1-b625a0f58a57/export Thu, 23 Jul 2026 16:35:05 +0000 https://vulnerability.circl.lu/sighting/7b7be676-3fa2-4542-83cf-3c4fc7d75833/export {"uuid": "7b7be676-3fa2-4542-83cf-3c4fc7d75833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59933", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrd5tmlace2i", "content": "A malformed 1 KB spreadsheet can crash PHP apps that use PhpSpreadsheet, the standard library for reading Excel files (CVE-2026-59933).\n\nIt fires during file-type detection, so even .xlsx-only apps are exposed.\n\nNo code execution. Patch now.", "creation_timestamp": "2026-07-23T15:31:30.448626Z"} {"uuid": "7b7be676-3fa2-4542-83cf-3c4fc7d75833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59933", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrd5tmlace2i", "content": "A malformed 1 KB spreadsheet can crash PHP apps that use PhpSpreadsheet, the standard library for reading Excel files (CVE-2026-59933).\n\nIt fires during file-type detection, so even .xlsx-only apps are exposed.\n\nNo code execution. Patch now.", "creation_timestamp": "2026-07-23T15:31:30.448626Z"} https://vulnerability.circl.lu/sighting/7b7be676-3fa2-4542-83cf-3c4fc7d75833/export Thu, 23 Jul 2026 15:31:30 +0000