https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 06 Jul 2026 00:47:39 +0000 https://vulnerability.circl.lu/sighting/fd373a75-7cc6-49b9-b804-55ec53128f4b/export {"uuid": "fd373a75-7cc6-49b9-b804-55ec53128f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49297", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpsjoi25k323", "content": "CVE-2026-49297: Apache Airflow Google provider: Path traversal via GCS object names \u2192 local/SFTP filesystem (GCSToSFTPOperator + GCSTimeSpanFileTransformOperator)", "creation_timestamp": "2026-07-04T07:22:55.036637Z"} {"uuid": "fd373a75-7cc6-49b9-b804-55ec53128f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49297", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpsjoi25k323", "content": "CVE-2026-49297: Apache Airflow Google provider: Path traversal via GCS object names \u2192 local/SFTP filesystem (GCSToSFTPOperator + GCSTimeSpanFileTransformOperator)", "creation_timestamp": "2026-07-04T07:22:55.036637Z"} https://vulnerability.circl.lu/sighting/fd373a75-7cc6-49b9-b804-55ec53128f4b/export Sat, 04 Jul 2026 07:22:55 +0000 https://vulnerability.circl.lu/sighting/8b4ab1d8-8476-4050-b3fb-75ee08feb585/export {"uuid": "8b4ab1d8-8476-4050-b3fb-75ee08feb585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-49293", "type": "published-proof-of-concept", "source": "https://github.com/sunnyadn/js-toml/security/advisories/GHSA-wp3c-266w-4qfq", "content": "", "creation_timestamp": "2026-06-27T00:35:47.219530Z"} {"uuid": "8b4ab1d8-8476-4050-b3fb-75ee08feb585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-49293", "type": "published-proof-of-concept", "source": "https://github.com/sunnyadn/js-toml/security/advisories/GHSA-wp3c-266w-4qfq", "content": "", "creation_timestamp": "2026-06-27T00:35:47.219530Z"} https://vulnerability.circl.lu/sighting/8b4ab1d8-8476-4050-b3fb-75ee08feb585/export Sat, 27 Jun 2026 00:35:47 +0000 https://vulnerability.circl.lu/sighting/a4b82604-99ca-49f4-89a6-2878f871eada/export {"uuid": "a4b82604-99ca-49f4-89a6-2878f871eada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-49291", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-2r68-g678-7qr3", "content": "", "creation_timestamp": "2026-06-26T22:35:27.339225Z"} {"uuid": "a4b82604-99ca-49f4-89a6-2878f871eada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-49291", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-2r68-g678-7qr3", "content": "", "creation_timestamp": "2026-06-26T22:35:27.339225Z"} https://vulnerability.circl.lu/sighting/a4b82604-99ca-49f4-89a6-2878f871eada/export Fri, 26 Jun 2026 22:35:27 +0000 https://vulnerability.circl.lu/sighting/98f3eacd-4a05-4c38-9ea4-da24ac257255/export {"uuid": "98f3eacd-4a05-4c38-9ea4-da24ac257255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49293", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mou4vxh2ex2c", "content": "CVE-2026-49293 - High severity DoS in js-toml parser. O(n\u00b2) BigInt operations allow resource exhaustion via crafted TOML input. CVSS 7.5. No patch yet. Update or monitor usage. #CVE #infosec #javascript\n\nhttps://www.valtersit.com/cve/CVE-2026-49293/", "creation_timestamp": "2026-06-22T05:14:35.394347Z"} {"uuid": "98f3eacd-4a05-4c38-9ea4-da24ac257255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49293", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mou4vxh2ex2c", "content": "CVE-2026-49293 - High severity DoS in js-toml parser. O(n\u00b2) BigInt operations allow resource exhaustion via crafted TOML input. CVSS 7.5. No patch yet. Update or monitor usage. #CVE #infosec #javascript\n\nhttps://www.valtersit.com/cve/CVE-2026-49293/", "creation_timestamp": "2026-06-22T05:14:35.394347Z"} https://vulnerability.circl.lu/sighting/98f3eacd-4a05-4c38-9ea4-da24ac257255/export Mon, 22 Jun 2026 05:14:35 +0000 https://vulnerability.circl.lu/sighting/caadd3ca-6459-42d1-8493-0d0b4112142a/export {"uuid": "caadd3ca-6459-42d1-8493-0d0b4112142a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49295", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moodmsmybf2i", "content": "CVE-2026-49295 - libde265 has an out-of-bounds write in process_reference_picture_set via predicted short-term RPS\nCVE ID : CVE-2026-49295\n \n Published : June 19, 2026, 8:09 p.m. | 1\u00a0hour, 33\u00a0minutes ago\n \n Description : libde265 is an open source implementation of the h.265 v...", "creation_timestamp": "2026-06-19T21:58:46.510536Z"} {"uuid": "caadd3ca-6459-42d1-8493-0d0b4112142a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49295", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moodmsmybf2i", "content": "CVE-2026-49295 - libde265 has an out-of-bounds write in process_reference_picture_set via predicted short-term RPS\nCVE ID : CVE-2026-49295\n \n Published : June 19, 2026, 8:09 p.m. | 1\u00a0hour, 33\u00a0minutes ago\n \n Description : libde265 is an open source implementation of the h.265 v...", "creation_timestamp": "2026-06-19T21:58:46.510536Z"} https://vulnerability.circl.lu/sighting/caadd3ca-6459-42d1-8493-0d0b4112142a/export Fri, 19 Jun 2026 21:58:46 +0000 https://vulnerability.circl.lu/sighting/4224fd12-9f1a-4c26-80bd-07b875e1d39b/export {"uuid": "4224fd12-9f1a-4c26-80bd-07b875e1d39b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49298", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mn5o73vqfo2o", "content": "CVE-2026-49298: Apache Airflow: JWT Token Exposure in KubernetesExecutor Command-Line Arguments", "creation_timestamp": "2026-05-31T13:27:29.824600Z"} {"uuid": "4224fd12-9f1a-4c26-80bd-07b875e1d39b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49298", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mn5o73vqfo2o", "content": "CVE-2026-49298: Apache Airflow: JWT Token Exposure in KubernetesExecutor Command-Line Arguments", "creation_timestamp": "2026-05-31T13:27:29.824600Z"} https://vulnerability.circl.lu/sighting/4224fd12-9f1a-4c26-80bd-07b875e1d39b/export Sun, 31 May 2026 13:27:29 +0000