https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 15 Sep 2026 12:18:17 +0000 https://vulnerability.circl.lu/sighting/accbf4aa-af29-4b6b-af97-28560f254a9c/export {"uuid": "accbf4aa-af29-4b6b-af97-28560f254a9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54334", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvj4qknfnk2j", "content": "\ud83d\udea8 CVE-2026-54334 \u2014 CVSS 9.8 CRITICAL\n\nUEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54334\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T22:08:38.150651Z"} {"uuid": "accbf4aa-af29-4b6b-af97-28560f254a9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54334", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvj4qknfnk2j", "content": "\ud83d\udea8 CVE-2026-54334 \u2014 CVSS 9.8 CRITICAL\n\nUEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54334\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T22:08:38.150651Z"} https://vulnerability.circl.lu/sighting/accbf4aa-af29-4b6b-af97-28560f254a9c/export Mon, 14 Sep 2026 22:08:38 +0000 https://vulnerability.circl.lu/sighting/81d2629d-0c1f-41e7-ad61-4dcdd4ec8f01/export {"uuid": "81d2629d-0c1f-41e7-ad61-4dcdd4ec8f01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54333", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvj4qbug6g2t", "content": "\ud83d\udea8 CVE-2026-54333 \u2014 CVSS 9.8 CRITICAL\n\nUEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54333\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T22:08:28.991962Z"} {"uuid": "81d2629d-0c1f-41e7-ad61-4dcdd4ec8f01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54333", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvj4qbug6g2t", "content": "\ud83d\udea8 CVE-2026-54333 \u2014 CVSS 9.8 CRITICAL\n\nUEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54333\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T22:08:28.991962Z"} https://vulnerability.circl.lu/sighting/81d2629d-0c1f-41e7-ad61-4dcdd4ec8f01/export Mon, 14 Sep 2026 22:08:28 +0000 https://vulnerability.circl.lu/sighting/ca8512b4-c756-4b89-9e50-999e39018052/export {"uuid": "ca8512b4-c756-4b89-9e50-999e39018052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54334", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvj35kwdxm2j", "content": "CVE-2026-54334 - uefi-firmware-parser\nVersions of the UEFI Firmware Parser before 1.14 can be fooled by specially crafted BIOS or firmware files. The parser may write beyond its internal memory area, causing the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#theopolis #CVE #infosec", "creation_timestamp": "2026-09-14T21:40:07.379900Z"} {"uuid": "ca8512b4-c756-4b89-9e50-999e39018052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54334", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvj35kwdxm2j", "content": "CVE-2026-54334 - uefi-firmware-parser\nVersions of the UEFI Firmware Parser before 1.14 can be fooled by specially crafted BIOS or firmware files. The parser may write beyond its internal memory area, causing the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#theopolis #CVE #infosec", "creation_timestamp": "2026-09-14T21:40:07.379900Z"} https://vulnerability.circl.lu/sighting/ca8512b4-c756-4b89-9e50-999e39018052/export Mon, 14 Sep 2026 21:40:07 +0000 https://vulnerability.circl.lu/sighting/242add09-5200-40f3-ab6d-4d8c0a2c0644/export {"uuid": "242add09-5200-40f3-ab6d-4d8c0a2c0644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54333", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvj35ir7hp2p", "content": "CVE-2026-54333 - uefi-firmware-parser\nThe UEFI Firmware Parser tool (versions before 1.14) can mishandle specially crafted firmware data, causing it to write past its own memory space. This can make the program\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#theopolis #CVE #infosec", "creation_timestamp": "2026-09-14T21:40:05.249945Z"} {"uuid": "242add09-5200-40f3-ab6d-4d8c0a2c0644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54333", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvj35ir7hp2p", "content": "CVE-2026-54333 - uefi-firmware-parser\nThe UEFI Firmware Parser tool (versions before 1.14) can mishandle specially crafted firmware data, causing it to write past its own memory space. This can make the program\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#theopolis #CVE #infosec", "creation_timestamp": "2026-09-14T21:40:05.249945Z"} https://vulnerability.circl.lu/sighting/242add09-5200-40f3-ab6d-4d8c0a2c0644/export Mon, 14 Sep 2026 21:40:05 +0000 https://vulnerability.circl.lu/sighting/230f579d-7e17-4fee-9249-af1185949cb7/export {"uuid": "230f579d-7e17-4fee-9249-af1185949cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54338", "type": "seen", "source": "https://gist.github.com/alon710/4b4569a59147cbf248fba613069c312c", "content": "# CVE-2026-54338: CVE-2026-54338: JupyterHub Unauthenticated Denial of Service via Unbounded Username Logging\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-08-25\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54338\n\n## Summary\nJupyterHub is vulnerable to an unauthenticated Denial of Service (DoS) vulnerability. Prior to version 5.5.0, form-based authenticators failed to restrict the size of the username input field on failed logins, allowing remote attackers to exhaust host storage and memory resources.\n\n## TL;DR\nUnauthenticated remote attackers can trigger a Denial of Service on JupyterHub by sending oversized username strings to form-based login endpoints, exhausting system log storage and server memory.\n\n## Technical Details\n\n- **CWE ID**: CWE-400\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 5.3 (Medium)\n- **EPSS Score**: 0.00282 (Percentile: 20.17%)\n- **Impact**: Denial of Service, Log Injection\n- **Exploit Status**: None\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- JupyterHub\n- **jupyterhub**: < 5.5.0 (Fixed in: `5.5.0`)\n\n## Mitigation\n\n- Upgrade to JupyterHub version 5.5.0 or later\n- Transition to third-party non-form authenticators like OAuthenticator\n- Apply reverse proxy rate limiting on the /hub/login route\n- Implement filesystem isolated log rotation and storage quotas\n\n**Remediation Steps:**\n1. Check current JupyterHub installation version using 'jupyterhub --version'\n2. Update JupyterHub deployment packages to version 5.5.0 or higher\n3. Restart the JupyterHub service to load the patched code paths\n4. Configure disk write quotas and log rotation for the logging volume\n\n## References\n\n- [GHSA-p43p-whwx-q52h](https://github.com/jupyterhub/jupyterhub/security/advisories/GHSA-p43p-whwx-q52h)\n- [Fix Commit](https://github.com/jupyterhub/jupyterhub/commit/d6dc595f84b7509969686da31d87d6d69e7fce0a)\n- [NVD Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-54338)\n- [CVE Record](https://www.cve.org/CVERecord?id=CVE-2026-54338)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54338) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-25T20:33:25.238008Z"} {"uuid": "230f579d-7e17-4fee-9249-af1185949cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54338", "type": "seen", "source": "https://gist.github.com/alon710/4b4569a59147cbf248fba613069c312c", "content": "# CVE-2026-54338: CVE-2026-54338: JupyterHub Unauthenticated Denial of Service via Unbounded Username Logging\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-08-25\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54338\n\n## Summary\nJupyterHub is vulnerable to an unauthenticated Denial of Service (DoS) vulnerability. Prior to version 5.5.0, form-based authenticators failed to restrict the size of the username input field on failed logins, allowing remote attackers to exhaust host storage and memory resources.\n\n## TL;DR\nUnauthenticated remote attackers can trigger a Denial of Service on JupyterHub by sending oversized username strings to form-based login endpoints, exhausting system log storage and server memory.\n\n## Technical Details\n\n- **CWE ID**: CWE-400\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 5.3 (Medium)\n- **EPSS Score**: 0.00282 (Percentile: 20.17%)\n- **Impact**: Denial of Service, Log Injection\n- **Exploit Status**: None\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- JupyterHub\n- **jupyterhub**: < 5.5.0 (Fixed in: `5.5.0`)\n\n## Mitigation\n\n- Upgrade to JupyterHub version 5.5.0 or later\n- Transition to third-party non-form authenticators like OAuthenticator\n- Apply reverse proxy rate limiting on the /hub/login route\n- Implement filesystem isolated log rotation and storage quotas\n\n**Remediation Steps:**\n1. Check current JupyterHub installation version using 'jupyterhub --version'\n2. Update JupyterHub deployment packages to version 5.5.0 or higher\n3. Restart the JupyterHub service to load the patched code paths\n4. Configure disk write quotas and log rotation for the logging volume\n\n## References\n\n- [GHSA-p43p-whwx-q52h](https://github.com/jupyterhub/jupyterhub/security/advisories/GHSA-p43p-whwx-q52h)\n- [Fix Commit](https://github.com/jupyterhub/jupyterhub/commit/d6dc595f84b7509969686da31d87d6d69e7fce0a)\n- [NVD Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-54338)\n- [CVE Record](https://www.cve.org/CVERecord?id=CVE-2026-54338)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54338) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-25T20:33:25.238008Z"} https://vulnerability.circl.lu/sighting/230f579d-7e17-4fee-9249-af1185949cb7/export Tue, 25 Aug 2026 20:33:25 +0000 https://vulnerability.circl.lu/sighting/50553ce5-3795-4066-9fb1-7ee365d81f75/export {"uuid": "50553ce5-3795-4066-9fb1-7ee365d81f75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54330", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtjiko2z7r2t", "content": "\ud83d\udc1b VULNERABILITIES (CVSS 8.2) CVE-2026-54330: \u2014 severity important \u2014 Red Hat Security Data (JSON)\nhttps://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-54330.json #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-08-20T14:49:42.531520Z"} {"uuid": "50553ce5-3795-4066-9fb1-7ee365d81f75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54330", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtjiko2z7r2t", "content": "\ud83d\udc1b VULNERABILITIES (CVSS 8.2) CVE-2026-54330: \u2014 severity important \u2014 Red Hat Security Data (JSON)\nhttps://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-54330.json #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-08-20T14:49:42.531520Z"} https://vulnerability.circl.lu/sighting/50553ce5-3795-4066-9fb1-7ee365d81f75/export Thu, 20 Aug 2026 14:49:42 +0000 https://vulnerability.circl.lu/sighting/e8231d91-e67b-4356-965c-2b2554145ed0/export {"uuid": "e8231d91-e67b-4356-965c-2b2554145ed0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54330", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh7ac24k26", "content": "\ud83d\udd17 CVE : CVE-2025-30156, CVE-2026-39944, CVE-2026-50152, CVE-2026-54330", "creation_timestamp": "2026-08-20T14:25:25.221992Z"} {"uuid": "e8231d91-e67b-4356-965c-2b2554145ed0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54330", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh7ac24k26", "content": "\ud83d\udd17 CVE : CVE-2025-30156, CVE-2026-39944, CVE-2026-50152, CVE-2026-54330", "creation_timestamp": "2026-08-20T14:25:25.221992Z"} https://vulnerability.circl.lu/sighting/e8231d91-e67b-4356-965c-2b2554145ed0/export Thu, 20 Aug 2026 14:25:25 +0000 https://vulnerability.circl.lu/sighting/c3f71b1a-b11a-4455-b9a5-006929cf3b0c/export {"uuid": "c3f71b1a-b11a-4455-b9a5-006929cf3b0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54332", "type": "published-proof-of-concept", "source": "https://github.com/gopacket/gopacket/security/advisories/GHSA-g6v3-7xmc-w563", "content": "", "creation_timestamp": "2026-07-28T18:35:11.073817Z"} {"uuid": "c3f71b1a-b11a-4455-b9a5-006929cf3b0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54332", "type": "published-proof-of-concept", "source": "https://github.com/gopacket/gopacket/security/advisories/GHSA-g6v3-7xmc-w563", "content": "", "creation_timestamp": "2026-07-28T18:35:11.073817Z"} https://vulnerability.circl.lu/sighting/c3f71b1a-b11a-4455-b9a5-006929cf3b0c/export Tue, 28 Jul 2026 18:35:11 +0000 https://vulnerability.circl.lu/sighting/126a8ff0-b33a-43ee-a24c-43e8a47174d3/export {"uuid": "126a8ff0-b33a-43ee-a24c-43e8a47174d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54335", "type": "seen", "source": "https://bsky.app/profile/amadeustech.bsky.social/post/3mquxhjsacv2x", "content": "The recent CVE-2026-54335 vulnerability in Feathersjs highlights the importance of secure coding practices in high-performance trading infrastructure, particularly in our Cortex Trading Systems where we utilize optimized CLOB architecture to minimize latency and maximize eff", "creation_timestamp": "2026-07-18T00:00:07.386999Z"} {"uuid": "126a8ff0-b33a-43ee-a24c-43e8a47174d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54335", "type": "seen", "source": "https://bsky.app/profile/amadeustech.bsky.social/post/3mquxhjsacv2x", "content": "The recent CVE-2026-54335 vulnerability in Feathersjs highlights the importance of secure coding practices in high-performance trading infrastructure, particularly in our Cortex Trading Systems where we utilize optimized CLOB architecture to minimize latency and maximize eff", "creation_timestamp": "2026-07-18T00:00:07.386999Z"} https://vulnerability.circl.lu/sighting/126a8ff0-b33a-43ee-a24c-43e8a47174d3/export Sat, 18 Jul 2026 00:00:07 +0000 https://vulnerability.circl.lu/sighting/f535de54-2048-41c1-96bc-9a0ccfee4473/export {"uuid": "f535de54-2048-41c1-96bc-9a0ccfee4473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54335", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqux7yi36n2j", "content": "CVE-2026-54335 - Feathersjs: Prototype pollution in @feathersjs/commons _.merge via JSON-parsed __proto__\nCVE ID : CVE-2026-54335\n \n Published : July 17, 2026, 10:17 p.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : Feathersjs is a framework for creating web APIs and real-time ap...", "creation_timestamp": "2026-07-17T23:55:52.379401Z"} {"uuid": "f535de54-2048-41c1-96bc-9a0ccfee4473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54335", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqux7yi36n2j", "content": "CVE-2026-54335 - Feathersjs: Prototype pollution in @feathersjs/commons _.merge via JSON-parsed __proto__\nCVE ID : CVE-2026-54335\n \n Published : July 17, 2026, 10:17 p.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : Feathersjs is a framework for creating web APIs and real-time ap...", "creation_timestamp": "2026-07-17T23:55:52.379401Z"} https://vulnerability.circl.lu/sighting/f535de54-2048-41c1-96bc-9a0ccfee4473/export Fri, 17 Jul 2026 23:55:52 +0000