https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 08 Jul 2026 20:31:02 +0000 https://vulnerability.circl.lu/sighting/9cd59299-36d8-49c5-b0fa-3ac161557a11/export {"uuid": "9cd59299-36d8-49c5-b0fa-3ac161557a11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59195", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mq2akkns5g2g", "content": "CVE-2026-59195 - Path Traversal in pnpm. Malicious lockfile can create symlinks outside expected directory. CVSS 8.2. Update to 10.34.4 or 11.8.0 immediately. #CVE #pnpm #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-59195/", "creation_timestamp": "2026-07-07T09:00:57.706747Z"} {"uuid": "9cd59299-36d8-49c5-b0fa-3ac161557a11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59195", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mq2akkns5g2g", "content": "CVE-2026-59195 - Path Traversal in pnpm. Malicious lockfile can create symlinks outside expected directory. CVSS 8.2. Update to 10.34.4 or 11.8.0 immediately. #CVE #pnpm #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-59195/", "creation_timestamp": "2026-07-07T09:00:57.706747Z"} https://vulnerability.circl.lu/sighting/9cd59299-36d8-49c5-b0fa-3ac161557a11/export Tue, 07 Jul 2026 09:00:57 +0000 https://vulnerability.circl.lu/sighting/ec8a7115-e778-460f-8e02-e2f6685680af/export {"uuid": "ec8a7115-e778-460f-8e02-e2f6685680af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59195", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpyiac7bhz2h", "content": "CVE-2026-59195 - pnpm: Path traversal in configDependencies env lockfile allows symlink creation outside node_modules/.pnpm-config\nCVE ID : CVE-2026-59195\n \n Published : July 6, 2026, 3:21 p.m. | 27\u00a0minutes ago\n \n Description : pnpm is a package manager. Prior to 10.34.4 and 1...", "creation_timestamp": "2026-07-06T16:13:06.107423Z"} {"uuid": "ec8a7115-e778-460f-8e02-e2f6685680af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59195", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpyiac7bhz2h", "content": "CVE-2026-59195 - pnpm: Path traversal in configDependencies env lockfile allows symlink creation outside node_modules/.pnpm-config\nCVE ID : CVE-2026-59195\n \n Published : July 6, 2026, 3:21 p.m. | 27\u00a0minutes ago\n \n Description : pnpm is a package manager. Prior to 10.34.4 and 1...", "creation_timestamp": "2026-07-06T16:13:06.107423Z"} https://vulnerability.circl.lu/sighting/ec8a7115-e778-460f-8e02-e2f6685680af/export Mon, 06 Jul 2026 16:13:06 +0000 https://vulnerability.circl.lu/sighting/591d88d5-6498-42dd-a09b-61339d5efa29/export {"uuid": "591d88d5-6498-42dd-a09b-61339d5efa29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59194", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpyi3sovst2q", "content": "CVE-2026-59194 - pnpm: patch-remove could delete project-selected files outside the patches directory\nCVE ID : CVE-2026-59194\n \n Published : July 6, 2026, 3:16 p.m. | 31\u00a0minutes ago\n \n Description : pnpm is a package manager. Prior to 10.34.4 and 11.7.0, a crafted patch entry ...", "creation_timestamp": "2026-07-06T16:10:33.447729Z"} {"uuid": "591d88d5-6498-42dd-a09b-61339d5efa29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59194", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpyi3sovst2q", "content": "CVE-2026-59194 - pnpm: patch-remove could delete project-selected files outside the patches directory\nCVE ID : CVE-2026-59194\n \n Published : July 6, 2026, 3:16 p.m. | 31\u00a0minutes ago\n \n Description : pnpm is a package manager. Prior to 10.34.4 and 11.7.0, a crafted patch entry ...", "creation_timestamp": "2026-07-06T16:10:33.447729Z"} https://vulnerability.circl.lu/sighting/591d88d5-6498-42dd-a09b-61339d5efa29/export Mon, 06 Jul 2026 16:10:33 +0000 https://vulnerability.circl.lu/sighting/941b07c9-d711-4425-bc46-ac390eb5dbfe/export {"uuid": "941b07c9-d711-4425-bc46-ac390eb5dbfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59196", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpyhgmpw5b27", "content": "CVE-2026-59196 - pnpm: hoisted install imports lockfile alias outside node_modules\nCVE ID : CVE-2026-59196\n \n Published : July 6, 2026, 3:18 p.m. | 29\u00a0minutes ago\n \n Description : pnpm is a package manager. Prior to 10.34.4 and 11.7.0, a crafted lockfile alias could be joined ...", "creation_timestamp": "2026-07-06T15:58:42.371712Z"} {"uuid": "941b07c9-d711-4425-bc46-ac390eb5dbfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59196", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpyhgmpw5b27", "content": "CVE-2026-59196 - pnpm: hoisted install imports lockfile alias outside node_modules\nCVE ID : CVE-2026-59196\n \n Published : July 6, 2026, 3:18 p.m. | 29\u00a0minutes ago\n \n Description : pnpm is a package manager. Prior to 10.34.4 and 11.7.0, a crafted lockfile alias could be joined ...", "creation_timestamp": "2026-07-06T15:58:42.371712Z"} https://vulnerability.circl.lu/sighting/941b07c9-d711-4425-bc46-ac390eb5dbfe/export Mon, 06 Jul 2026 15:58:42 +0000 https://vulnerability.circl.lu/sighting/78e2fb22-f220-4dd0-a9b5-408555f2a81b/export {"uuid": "78e2fb22-f220-4dd0-a9b5-408555f2a81b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5919", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"} {"uuid": "78e2fb22-f220-4dd0-a9b5-408555f2a81b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5919", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"} https://vulnerability.circl.lu/sighting/78e2fb22-f220-4dd0-a9b5-408555f2a81b/export Tue, 14 Apr 2026 15:49:19 +0000 https://vulnerability.circl.lu/sighting/e6bffbc1-0460-419f-bf35-5f6a7ac96280/export {"uuid": "e6bffbc1-0460-419f-bf35-5f6a7ac96280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5919", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"} {"uuid": "e6bffbc1-0460-419f-bf35-5f6a7ac96280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5919", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"} https://vulnerability.circl.lu/sighting/e6bffbc1-0460-419f-bf35-5f6a7ac96280/export Sun, 12 Apr 2026 20:00:00 +0000 https://vulnerability.circl.lu/sighting/4d9a2b07-c9cf-4e3e-b63f-30c923be2b5b/export {"uuid": "4d9a2b07-c9cf-4e3e-b63f-30c923be2b5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5919", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260409", "content": "", "creation_timestamp": "2026-04-08T18:00:00.000000Z"} {"uuid": "4d9a2b07-c9cf-4e3e-b63f-30c923be2b5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5919", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260409", "content": "", "creation_timestamp": "2026-04-08T18:00:00.000000Z"} https://vulnerability.circl.lu/sighting/4d9a2b07-c9cf-4e3e-b63f-30c923be2b5b/export Wed, 08 Apr 2026 18:00:00 +0000