https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 21 Sep 2026 04:18:22 +0000 https://vulnerability.circl.lu/sighting/8950dc82-0004-4642-88fb-ea5ae2695bb5/export {"uuid": "8950dc82-0004-4642-88fb-ea5ae2695bb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98238", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9147-uproot-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SaiTeja-Erukude\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 21:58:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nuproot <= 5.7.4 code injection via unsafe Python source generation from ROOT TStreamerInfo metadata.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T00:00:10.185590Z"} {"uuid": "8950dc82-0004-4642-88fb-ea5ae2695bb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98238", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9147-uproot-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SaiTeja-Erukude\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 21:58:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nuproot <= 5.7.4 code injection via unsafe Python source generation from ROOT TStreamerInfo metadata.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T00:00:10.185590Z"} https://vulnerability.circl.lu/sighting/8950dc82-0004-4642-88fb-ea5ae2695bb5/export Mon, 24 Aug 2026 00:00:10 +0000 https://vulnerability.circl.lu/sighting/a3f7dafa-3701-4535-bed4-7d2fbc010b0d/export {"uuid": "a3f7dafa-3701-4535-bed4-7d2fbc010b0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "seen", "source": "https://t.me/GithubRedTeam/98238", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9147-uproot-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SaiTeja-Erukude\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 21:58:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nuproot <= 5.7.4 code injection via unsafe Python source generation from ROOT TStreamerInfo metadata.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:33.292635Z"} {"uuid": "a3f7dafa-3701-4535-bed4-7d2fbc010b0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "seen", "source": "https://t.me/GithubRedTeam/98238", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9147-uproot-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SaiTeja-Erukude\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 21:58:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nuproot <= 5.7.4 code injection via unsafe Python source generation from ROOT TStreamerInfo metadata.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:33.292635Z"} https://vulnerability.circl.lu/sighting/a3f7dafa-3701-4535-bed4-7d2fbc010b0d/export Sun, 23 Aug 2026 00:00:33 +0000 https://vulnerability.circl.lu/sighting/9d564912-69d4-4ccd-b8b4-b2f5c850d1ad/export {"uuid": "9d564912-69d4-4ccd-b8b4-b2f5c850d1ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "seen", "source": "https://t.me/GithubRedTeam/98238", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9147-uproot-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SaiTeja-Erukude\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 21:58:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nuproot <= 5.7.4 code injection via unsafe Python source generation from ROOT TStreamerInfo metadata.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:09.849419Z"} {"uuid": "9d564912-69d4-4ccd-b8b4-b2f5c850d1ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "seen", "source": "https://t.me/GithubRedTeam/98238", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9147-uproot-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SaiTeja-Erukude\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 21:58:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nuproot <= 5.7.4 code injection via unsafe Python source generation from ROOT TStreamerInfo metadata.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:09.849419Z"} https://vulnerability.circl.lu/sighting/9d564912-69d4-4ccd-b8b4-b2f5c850d1ad/export Sat, 22 Aug 2026 19:00:09 +0000 https://vulnerability.circl.lu/sighting/d2faa4de-e7d0-410f-9a74-65096c2be456/export {"uuid": "d2faa4de-e7d0-410f-9a74-65096c2be456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "published-proof-of-concept", "source": "Telegram/grGgFPZ83MCjoN4lsKRGKPYRhb0kdh5D59BuMU6s61_TMsM", "content": "", "creation_timestamp": "2026-08-18T00:00:10.487085Z"} {"uuid": "d2faa4de-e7d0-410f-9a74-65096c2be456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "published-proof-of-concept", "source": "Telegram/grGgFPZ83MCjoN4lsKRGKPYRhb0kdh5D59BuMU6s61_TMsM", "content": "", "creation_timestamp": "2026-08-18T00:00:10.487085Z"} https://vulnerability.circl.lu/sighting/d2faa4de-e7d0-410f-9a74-65096c2be456/export Tue, 18 Aug 2026 00:00:10 +0000 https://vulnerability.circl.lu/sighting/d5d7656e-51eb-4443-9c17-42920790ab5c/export {"uuid": "d5d7656e-51eb-4443-9c17-42920790ab5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "published-proof-of-concept", "source": "Telegram/EqoYaV6nsS8NdFMiUlh20F2PL0M0xTB12P2J_sYTarvuZL8", "content": "", "creation_timestamp": "2026-08-18T00:00:10.104252Z"} {"uuid": "d5d7656e-51eb-4443-9c17-42920790ab5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "published-proof-of-concept", "source": "Telegram/EqoYaV6nsS8NdFMiUlh20F2PL0M0xTB12P2J_sYTarvuZL8", "content": "", "creation_timestamp": "2026-08-18T00:00:10.104252Z"} https://vulnerability.circl.lu/sighting/d5d7656e-51eb-4443-9c17-42920790ab5c/export Tue, 18 Aug 2026 00:00:10 +0000 https://vulnerability.circl.lu/sighting/2a1ead71-837d-426b-82ac-8d9fceb95093/export {"uuid": "2a1ead71-837d-426b-82ac-8d9fceb95093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "seen", "source": "Telegram/EqoYaV6nsS8NdFMiUlh20F2PL0M0xTB12P2J_sYTarvuZL8", "content": "", "creation_timestamp": "2026-08-17T18:00:06.284343Z"} {"uuid": "2a1ead71-837d-426b-82ac-8d9fceb95093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "seen", "source": "Telegram/EqoYaV6nsS8NdFMiUlh20F2PL0M0xTB12P2J_sYTarvuZL8", "content": "", "creation_timestamp": "2026-08-17T18:00:06.284343Z"} https://vulnerability.circl.lu/sighting/2a1ead71-837d-426b-82ac-8d9fceb95093/export Mon, 17 Aug 2026 18:00:06 +0000 https://vulnerability.circl.lu/sighting/70eecc9a-2d69-41b9-bda1-18da6f70a16f/export {"uuid": "70eecc9a-2d69-41b9-bda1-18da6f70a16f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "seen", "source": "Telegram/grGgFPZ83MCjoN4lsKRGKPYRhb0kdh5D59BuMU6s61_TMsM", "content": "", "creation_timestamp": "2026-08-17T18:00:05.752922Z"} {"uuid": "70eecc9a-2d69-41b9-bda1-18da6f70a16f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "seen", "source": "Telegram/grGgFPZ83MCjoN4lsKRGKPYRhb0kdh5D59BuMU6s61_TMsM", "content": "", "creation_timestamp": "2026-08-17T18:00:05.752922Z"} https://vulnerability.circl.lu/sighting/70eecc9a-2d69-41b9-bda1-18da6f70a16f/export Mon, 17 Aug 2026 18:00:05 +0000 https://vulnerability.circl.lu/sighting/5114f993-246b-4bb4-a254-61663f374499/export {"uuid": "5114f993-246b-4bb4-a254-61663f374499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mr7kctwzem23", "content": "Daily IT Security Digest \u2014 2026-07-22\nfound to contain high-severity malicious code injecting arbitrary Python execution via crafted ROOT files \u2014 a critical supply-chain attack vector for physics and data science workflows. CVE-2026-9147 scores CVSS 8.5 as malicious ROOT files can trigger arbitrary", "creation_timestamp": "2026-07-22T05:04:07.221593Z"} {"uuid": "5114f993-246b-4bb4-a254-61663f374499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mr7kctwzem23", "content": "Daily IT Security Digest \u2014 2026-07-22\nfound to contain high-severity malicious code injecting arbitrary Python execution via crafted ROOT files \u2014 a critical supply-chain attack vector for physics and data science workflows. CVE-2026-9147 scores CVSS 8.5 as malicious ROOT files can trigger arbitrary", "creation_timestamp": "2026-07-22T05:04:07.221593Z"} https://vulnerability.circl.lu/sighting/5114f993-246b-4bb4-a254-61663f374499/export Wed, 22 Jul 2026 05:04:07 +0000 https://vulnerability.circl.lu/sighting/d924a435-c074-4154-9729-0f1d396b5d38/export {"uuid": "d924a435-c074-4154-9729-0f1d396b5d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mr7kcto63n2w", "content": "Daily IT Security Digest \u2014 2026-07-22\nhttps://mastodon.social/@Analyst207/116732756276891823, https://mastodon.social/@hermes71.bsky.social\n\n## 6. scikit-hep `uproot` Package Contains Malicious Code (CVE-2026-9147)\nThe Python scientific computing package `uproot` (published under scikit-hep on", "creation_timestamp": "2026-07-22T05:04:06.506155Z"} {"uuid": "d924a435-c074-4154-9729-0f1d396b5d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mr7kcto63n2w", "content": "Daily IT Security Digest \u2014 2026-07-22\nhttps://mastodon.social/@Analyst207/116732756276891823, https://mastodon.social/@hermes71.bsky.social\n\n## 6. scikit-hep `uproot` Package Contains Malicious Code (CVE-2026-9147)\nThe Python scientific computing package `uproot` (published under scikit-hep on", "creation_timestamp": "2026-07-22T05:04:06.506155Z"} https://vulnerability.circl.lu/sighting/d924a435-c074-4154-9729-0f1d396b5d38/export Wed, 22 Jul 2026 05:04:06 +0000 https://vulnerability.circl.lu/sighting/3210ba2d-4d6f-478d-b068-be6cc5c41039/export {"uuid": "3210ba2d-4d6f-478d-b068-be6cc5c41039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9147", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mr4zrhkg3w2u", "content": "Daily IT Security Digest \u2014 2026-07-21\nthis toolkit. Users are advised to avoid processing untrusted ROOT files until a patch is released. [Source](https://radar.offseq.com/threat/cve-2026-9147) | [Mastodon](https://infosec.exchange/@offseq/116941221213811825)", "creation_timestamp": "2026-07-21T05:02:44.146218Z"} {"uuid": "3210ba2d-4d6f-478d-b068-be6cc5c41039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9147", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mr4zrhkg3w2u", "content": "Daily IT Security Digest \u2014 2026-07-21\nthis toolkit. Users are advised to avoid processing untrusted ROOT files until a patch is released. [Source](https://radar.offseq.com/threat/cve-2026-9147) | [Mastodon](https://infosec.exchange/@offseq/116941221213811825)", "creation_timestamp": "2026-07-21T05:02:44.146218Z"} https://vulnerability.circl.lu/sighting/3210ba2d-4d6f-478d-b068-be6cc5c41039/export Tue, 21 Jul 2026 05:02:44 +0000