<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 21 Jul 2026 03:12:14 +0000</lastBuildDate>
    <item>
      <title>09ae558e-5db4-4b60-b467-9d409987787c</title>
      <link>https://vulnerability.circl.lu/sighting/09ae558e-5db4-4b60-b467-9d409987787c/export</link>
      <description>{"uuid": "09ae558e-5db4-4b60-b467-9d409987787c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58413", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3y52bqdc2o", "content": "CVE-2026-58413 - EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data\nCVE ID : CVE-2026-58413\n \n Published : July 20, 2026, 5:18 p.m. | 26\u00a0minutes ago\n \n Description : Network-AI is a TypeScript/Node.js multi-agent orchestrat...", "creation_timestamp": "2026-07-20T19:00:45.586459Z"}</description>
      <content:encoded>{"uuid": "09ae558e-5db4-4b60-b467-9d409987787c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58413", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3y52bqdc2o", "content": "CVE-2026-58413 - EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data\nCVE ID : CVE-2026-58413\n \n Published : July 20, 2026, 5:18 p.m. | 26\u00a0minutes ago\n \n Description : Network-AI is a TypeScript/Node.js multi-agent orchestrat...", "creation_timestamp": "2026-07-20T19:00:45.586459Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/09ae558e-5db4-4b60-b467-9d409987787c/export</guid>
      <pubDate>Mon, 20 Jul 2026 19:00:45 +0000</pubDate>
    </item>
    <item>
      <title>78400643-de60-458e-9b39-e4b8c972417a</title>
      <link>https://vulnerability.circl.lu/sighting/78400643-de60-458e-9b39-e4b8c972417a/export</link>
      <description>{"uuid": "78400643-de60-458e-9b39-e4b8c972417a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58414", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3x7ptn7q2g", "content": "CVE-2026-58414 - Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups\nCVE ID : CVE-2026-58414\n \n Published : July 20, 2026, 5:18 p.m. | 26\u00a0minutes ago\n \n Description : Network-AI is a TypeScript/Node.j...", "creation_timestamp": "2026-07-20T18:44:21.430785Z"}</description>
      <content:encoded>{"uuid": "78400643-de60-458e-9b39-e4b8c972417a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58414", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3x7ptn7q2g", "content": "CVE-2026-58414 - Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups\nCVE ID : CVE-2026-58414\n \n Published : July 20, 2026, 5:18 p.m. | 26\u00a0minutes ago\n \n Description : Network-AI is a TypeScript/Node.j...", "creation_timestamp": "2026-07-20T18:44:21.430785Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/78400643-de60-458e-9b39-e4b8c972417a/export</guid>
      <pubDate>Mon, 20 Jul 2026 18:44:21 +0000</pubDate>
    </item>
    <item>
      <title>44e7bc37-a045-4cf6-a82c-153333ac4931</title>
      <link>https://vulnerability.circl.lu/sighting/44e7bc37-a045-4cf6-a82c-153333ac4931/export</link>
      <description>{"uuid": "44e7bc37-a045-4cf6-a82c-153333ac4931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58410", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqkoxhvhd42i", "content": "CVE-2026-58410 - ChurchCRM: Improper object-level authorization allows low-privileged users to read and modify other families\u2019 records\nCVE ID : CVE-2026-58410\n \n Published : July 13, 2026, 9:16 p.m. | 13\u00a0minutes ago\n \n Description : ChurchCRM is an open-source church managemen...", "creation_timestamp": "2026-07-13T22:01:19.257188Z"}</description>
      <content:encoded>{"uuid": "44e7bc37-a045-4cf6-a82c-153333ac4931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58410", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqkoxhvhd42i", "content": "CVE-2026-58410 - ChurchCRM: Improper object-level authorization allows low-privileged users to read and modify other families\u2019 records\nCVE ID : CVE-2026-58410\n \n Published : July 13, 2026, 9:16 p.m. | 13\u00a0minutes ago\n \n Description : ChurchCRM is an open-source church managemen...", "creation_timestamp": "2026-07-13T22:01:19.257188Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/44e7bc37-a045-4cf6-a82c-153333ac4931/export</guid>
      <pubDate>Mon, 13 Jul 2026 22:01:19 +0000</pubDate>
    </item>
    <item>
      <title>f6336900-8d30-4986-b403-81dba91bd54b</title>
      <link>https://vulnerability.circl.lu/sighting/f6336900-8d30-4986-b403-81dba91bd54b/export</link>
      <description>{"uuid": "f6336900-8d30-4986-b403-81dba91bd54b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58411", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqknjwttsh2z", "content": "CVE-2026-58411 - ChurchCRM has Reflected Cross-Site Scripting (XSS) via unsanitized request parameter names and values\nCVE ID : CVE-2026-58411\n \n Published : July 13, 2026, 9:05 p.m. | 24\u00a0minutes ago\n \n Description : ChurchCRM is an open-source church management system. Prior ...", "creation_timestamp": "2026-07-13T21:35:51.567356Z"}</description>
      <content:encoded>{"uuid": "f6336900-8d30-4986-b403-81dba91bd54b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58411", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqknjwttsh2z", "content": "CVE-2026-58411 - ChurchCRM has Reflected Cross-Site Scripting (XSS) via unsanitized request parameter names and values\nCVE ID : CVE-2026-58411\n \n Published : July 13, 2026, 9:05 p.m. | 24\u00a0minutes ago\n \n Description : ChurchCRM is an open-source church management system. Prior ...", "creation_timestamp": "2026-07-13T21:35:51.567356Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f6336900-8d30-4986-b403-81dba91bd54b/export</guid>
      <pubDate>Mon, 13 Jul 2026 21:35:51 +0000</pubDate>
    </item>
    <item>
      <title>8a063212-3860-4476-9205-69a14967dc13</title>
      <link>https://vulnerability.circl.lu/sighting/8a063212-3860-4476-9205-69a14967dc13/export</link>
      <description>{"uuid": "8a063212-3860-4476-9205-69a14967dc13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58418", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpryzvcfgb2l", "content": "CVE-2026-58418 - SSRF via HTTP Redirect in Repository Migration\nCVE ID : CVE-2026-58418\n \n Published : July 3, 2026, 8:54 p.m. | 3\u00a0hours, 19\u00a0minutes ago\n \n Description : SSRF via HTTP Redirect in Repository Migration\n \n Severity: 0.0 | NA\n \n Visit the link for more details, su...", "creation_timestamp": "2026-07-04T02:25:07.973559Z"}</description>
      <content:encoded>{"uuid": "8a063212-3860-4476-9205-69a14967dc13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58418", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpryzvcfgb2l", "content": "CVE-2026-58418 - SSRF via HTTP Redirect in Repository Migration\nCVE ID : CVE-2026-58418\n \n Published : July 3, 2026, 8:54 p.m. | 3\u00a0hours, 19\u00a0minutes ago\n \n Description : SSRF via HTTP Redirect in Repository Migration\n \n Severity: 0.0 | NA\n \n Visit the link for more details, su...", "creation_timestamp": "2026-07-04T02:25:07.973559Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8a063212-3860-4476-9205-69a14967dc13/export</guid>
      <pubDate>Sat, 04 Jul 2026 02:25:07 +0000</pubDate>
    </item>
    <item>
      <title>fc9ba2fe-a518-49f7-bc9e-f6fd9360b25d</title>
      <link>https://vulnerability.circl.lu/sighting/fc9ba2fe-a518-49f7-bc9e-f6fd9360b25d/export</link>
      <description>{"uuid": "fc9ba2fe-a518-49f7-bc9e-f6fd9360b25d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58419", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mprybxveca2a", "content": "CVE-2026-58419 - Notification API leaks private issue metadata after access revocation\nCVE ID : CVE-2026-58419\n \n Published : July 3, 2026, 8:54 p.m. | 3\u00a0hours, 19\u00a0minutes ago\n \n Description : Notification API leaks private issue metadata after access revocation\n \n Severity: 0...", "creation_timestamp": "2026-07-04T02:11:41.753274Z"}</description>
      <content:encoded>{"uuid": "fc9ba2fe-a518-49f7-bc9e-f6fd9360b25d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58419", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mprybxveca2a", "content": "CVE-2026-58419 - Notification API leaks private issue metadata after access revocation\nCVE ID : CVE-2026-58419\n \n Published : July 3, 2026, 8:54 p.m. | 3\u00a0hours, 19\u00a0minutes ago\n \n Description : Notification API leaks private issue metadata after access revocation\n \n Severity: 0...", "creation_timestamp": "2026-07-04T02:11:41.753274Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/fc9ba2fe-a518-49f7-bc9e-f6fd9360b25d/export</guid>
      <pubDate>Sat, 04 Jul 2026 02:11:41 +0000</pubDate>
    </item>
    <item>
      <title>1bd282d7-5dd4-484e-aecf-024bd8c6526b</title>
      <link>https://vulnerability.circl.lu/sighting/1bd282d7-5dd4-484e-aecf-024bd8c6526b/export</link>
      <description>{"uuid": "1bd282d7-5dd4-484e-aecf-024bd8c6526b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5841", "type": "published-proof-of-concept", "source": "Telegram/PMg85ruQxGJV3fewnx4iF85fyDu3eKOw9onWzzjaoGbfReM", "content": "", "creation_timestamp": "2026-04-09T07:17:08.000000Z"}</description>
      <content:encoded>{"uuid": "1bd282d7-5dd4-484e-aecf-024bd8c6526b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5841", "type": "published-proof-of-concept", "source": "Telegram/PMg85ruQxGJV3fewnx4iF85fyDu3eKOw9onWzzjaoGbfReM", "content": "", "creation_timestamp": "2026-04-09T07:17:08.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1bd282d7-5dd4-484e-aecf-024bd8c6526b/export</guid>
      <pubDate>Thu, 09 Apr 2026 07:17:08 +0000</pubDate>
    </item>
    <item>
      <title>77ed3978-7532-4d2e-8791-ee62a4356150</title>
      <link>https://vulnerability.circl.lu/sighting/77ed3978-7532-4d2e-8791-ee62a4356150/export</link>
      <description>{"uuid": "77ed3978-7532-4d2e-8791-ee62a4356150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5841", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-5841", "content": "", "creation_timestamp": "2026-04-08T20:16:06.000000Z"}</description>
      <content:encoded>{"uuid": "77ed3978-7532-4d2e-8791-ee62a4356150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5841", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-5841", "content": "", "creation_timestamp": "2026-04-08T20:16:06.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/77ed3978-7532-4d2e-8791-ee62a4356150/export</guid>
      <pubDate>Wed, 08 Apr 2026 20:16:06 +0000</pubDate>
    </item>
  </channel>
</rss>
