<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 26 Sep 2026 23:57:22 +0000</lastBuildDate>
    <item>
      <title>99da4989-9caa-410b-9066-4721cb795298</title>
      <link>https://vulnerability.circl.lu/sighting/99da4989-9caa-410b-9066-4721cb795298/export</link>
      <description>{"uuid": "99da4989-9caa-410b-9066-4721cb795298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84890", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvcp6pq4qd2t", "content": "CVE-2026-84890: undici decompression bomb risk. Malicious upstream can expand tiny payloads to hundreds of MB, exhausting client memory. CVSS 5.9. Patch status unknown\u2014review your undici usage and add limits if possible. Details: https://www.valtersit.com/cve/CVE-2026-84890/ #CVE", "creation_timestamp": "2026-09-12T08:50:03.198795Z"}</description>
      <content:encoded>{"uuid": "99da4989-9caa-410b-9066-4721cb795298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84890", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvcp6pq4qd2t", "content": "CVE-2026-84890: undici decompression bomb risk. Malicious upstream can expand tiny payloads to hundreds of MB, exhausting client memory. CVSS 5.9. Patch status unknown\u2014review your undici usage and add limits if possible. Details: https://www.valtersit.com/cve/CVE-2026-84890/ #CVE", "creation_timestamp": "2026-09-12T08:50:03.198795Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/99da4989-9caa-410b-9066-4721cb795298/export</guid>
      <pubDate>Sat, 12 Sep 2026 08:50:03 +0000</pubDate>
    </item>
    <item>
      <title>910f7e05-7b5e-4e1d-b158-c5e3e9de8b9a</title>
      <link>https://vulnerability.circl.lu/sighting/910f7e05-7b5e-4e1d-b158-c5e3e9de8b9a/export</link>
      <description>{"uuid": "910f7e05-7b5e-4e1d-b158-c5e3e9de8b9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84890", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117257168610414149", "content": "CVE-2026-84890: undici decompression bomb risk. Malicious upstream can expand tiny payloads to hundreds of MB, exhausting client memory. CVSS 5.9. Patch status unknown\u2014review your undici usage and add limits if possible. Details: https://www.valtersit.com/cve/CVE-2026-84890/ #CVE", "creation_timestamp": "2026-09-12T08:40:06.702752Z"}</description>
      <content:encoded>{"uuid": "910f7e05-7b5e-4e1d-b158-c5e3e9de8b9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84890", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117257168610414149", "content": "CVE-2026-84890: undici decompression bomb risk. Malicious upstream can expand tiny payloads to hundreds of MB, exhausting client memory. CVSS 5.9. Patch status unknown\u2014review your undici usage and add limits if possible. Details: https://www.valtersit.com/cve/CVE-2026-84890/ #CVE", "creation_timestamp": "2026-09-12T08:40:06.702752Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/910f7e05-7b5e-4e1d-b158-c5e3e9de8b9a/export</guid>
      <pubDate>Sat, 12 Sep 2026 08:40:06 +0000</pubDate>
    </item>
    <item>
      <title>46de0012-8358-4a29-920e-54dedca97f99</title>
      <link>https://vulnerability.circl.lu/sighting/46de0012-8358-4a29-920e-54dedca97f99/export</link>
      <description>{"uuid": "46de0012-8358-4a29-920e-54dedca97f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84890", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3muph6jb6xk2w", "content": "\ud83d\udea8 Moderate-severity security fix in undici (7.29.1, 8.10.2) just released!\n\nPatches CVE-2026-84890: undici vulnerable to Denial of Service via unbounded decompression of compressed responses\n\ngithub.com/nodejs/undic...", "creation_timestamp": "2026-09-04T17:06:12.602890Z"}</description>
      <content:encoded>{"uuid": "46de0012-8358-4a29-920e-54dedca97f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84890", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3muph6jb6xk2w", "content": "\ud83d\udea8 Moderate-severity security fix in undici (7.29.1, 8.10.2) just released!\n\nPatches CVE-2026-84890: undici vulnerable to Denial of Service via unbounded decompression of compressed responses\n\ngithub.com/nodejs/undic...", "creation_timestamp": "2026-09-04T17:06:12.602890Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/46de0012-8358-4a29-920e-54dedca97f99/export</guid>
      <pubDate>Fri, 04 Sep 2026 17:06:12 +0000</pubDate>
    </item>
  </channel>
</rss>
