https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 03:44:19 +0000 https://vulnerability.circl.lu/sighting/c82121d5-1e7b-4df8-b3ee-745e34ccd6ff/export {"uuid": "c82121d5-1e7b-4df8-b3ee-745e34ccd6ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82854", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mueqv7t6m22f", "content": "Nodemailer \u306b SMTP\u30b3\u30de\u30f3\u30c9\u6ce8\u5165\u306e\u8106\u5f31\u6027\uff08CVE-2026-82854\uff09\u3002\n\n\u8a55\u4fa1\u306f\u958b\u767a\u5143\u304c CVSS 2.3 LOW\u3001NVD\u63b2\u8f09\u306e\u5024\u306f 9.8 CRITICAL \u3068\u5272\u308c\u3066\u3044\u307e\u3059\u3002\u65e2\u5b9a\u306eenvelope\u306b\u306f size \u304c\u542b\u307e\u308c\u306a\u3044\u305f\u3081\u3001\u591a\u304f\u306e\u30a2\u30d7\u30ea\u306f\u5f71\u97ff\u3092\u53d7\u3051\u307e\u305b\u3093\u3002\n\n\u5bfe\u51e6: sendMail \u306b size \u4ed8\u304d\u306e envelope \u3092\u6e21\u3057\u3066\u3044\u308b\u304b\u78ba\u8a8d\u3057\u30018.0.4\u4ee5\u964d\u3078\u66f4\u65b0\u3057\u3066\u304f\u3060\u3055\u3044\u3002\n\nforsmile.jp/articles/nod...", "creation_timestamp": "2026-08-31T11:00:39.108027Z"} {"uuid": "c82121d5-1e7b-4df8-b3ee-745e34ccd6ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82854", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mueqv7t6m22f", "content": "Nodemailer \u306b SMTP\u30b3\u30de\u30f3\u30c9\u6ce8\u5165\u306e\u8106\u5f31\u6027\uff08CVE-2026-82854\uff09\u3002\n\n\u8a55\u4fa1\u306f\u958b\u767a\u5143\u304c CVSS 2.3 LOW\u3001NVD\u63b2\u8f09\u306e\u5024\u306f 9.8 CRITICAL \u3068\u5272\u308c\u3066\u3044\u307e\u3059\u3002\u65e2\u5b9a\u306eenvelope\u306b\u306f size \u304c\u542b\u307e\u308c\u306a\u3044\u305f\u3081\u3001\u591a\u304f\u306e\u30a2\u30d7\u30ea\u306f\u5f71\u97ff\u3092\u53d7\u3051\u307e\u305b\u3093\u3002\n\n\u5bfe\u51e6: sendMail \u306b size \u4ed8\u304d\u306e envelope \u3092\u6e21\u3057\u3066\u3044\u308b\u304b\u78ba\u8a8d\u3057\u30018.0.4\u4ee5\u964d\u3078\u66f4\u65b0\u3057\u3066\u304f\u3060\u3055\u3044\u3002\n\nforsmile.jp/articles/nod...", "creation_timestamp": "2026-08-31T11:00:39.108027Z"} https://vulnerability.circl.lu/sighting/c82121d5-1e7b-4df8-b3ee-745e34ccd6ff/export Mon, 31 Aug 2026 11:00:39 +0000 https://vulnerability.circl.lu/sighting/d7609cdf-c6f5-4335-ad22-71a2a58f7071/export {"uuid": "d7609cdf-c6f5-4335-ad22-71a2a58f7071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82859", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mueo2rqbtw2c", "content": "CVE-2026-82859 - hulumi\nIf you are using hulumi versions earlier than 1.3.2, the tool\u2019s default settings can be tricked into ignoring the limits you set on who can create or change resources. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hulumi #kerberosmansour #CVE #infosec", "creation_timestamp": "2026-08-31T10:10:04.836713Z"} {"uuid": "d7609cdf-c6f5-4335-ad22-71a2a58f7071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82859", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mueo2rqbtw2c", "content": "CVE-2026-82859 - hulumi\nIf you are using hulumi versions earlier than 1.3.2, the tool\u2019s default settings can be tricked into ignoring the limits you set on who can create or change resources. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hulumi #kerberosmansour #CVE #infosec", "creation_timestamp": "2026-08-31T10:10:04.836713Z"} https://vulnerability.circl.lu/sighting/d7609cdf-c6f5-4335-ad22-71a2a58f7071/export Mon, 31 Aug 2026 10:10:04 +0000 https://vulnerability.circl.lu/sighting/46f82f6b-4ed1-4637-a335-40bee96a940d/export {"uuid": "46f82f6b-4ed1-4637-a335-40bee96a940d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82859", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenxbor562e", "content": "\ud83d\udea8 CVE-2026-82859 \u2014 CVSS 9.3 CRITICAL\n\nhulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulu...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82859\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:08:07.566018Z"} {"uuid": "46f82f6b-4ed1-4637-a335-40bee96a940d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82859", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenxbor562e", "content": "\ud83d\udea8 CVE-2026-82859 \u2014 CVSS 9.3 CRITICAL\n\nhulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulu...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82859\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:08:07.566018Z"} https://vulnerability.circl.lu/sighting/46f82f6b-4ed1-4637-a335-40bee96a940d/export Mon, 31 Aug 2026 10:08:07 +0000 https://vulnerability.circl.lu/sighting/d735a3ee-41e4-40f8-a364-890e9b3d3528/export {"uuid": "d735a3ee-41e4-40f8-a364-890e9b3d3528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82858", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenwyfc3625", "content": "\ud83d\udea8 CVE-2026-82858 \u2014 CVSS 9.3 CRITICAL\n\n@hulumi/drift versions before 1.3.2 accept externally supplied execute plans without sufficient provenance ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82858\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:07:57.422569Z"} {"uuid": "d735a3ee-41e4-40f8-a364-890e9b3d3528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82858", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenwyfc3625", "content": "\ud83d\udea8 CVE-2026-82858 \u2014 CVSS 9.3 CRITICAL\n\n@hulumi/drift versions before 1.3.2 accept externally supplied execute plans without sufficient provenance ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82858\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:07:57.422569Z"} https://vulnerability.circl.lu/sighting/d735a3ee-41e4-40f8-a364-890e9b3d3528/export Mon, 31 Aug 2026 10:07:57 +0000 https://vulnerability.circl.lu/sighting/17814c6d-f6c0-4a1d-97e2-0fb9ddab62ba/export {"uuid": "17814c6d-f6c0-4a1d-97e2-0fb9ddab62ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82857", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenwpvjrw25", "content": "\ud83d\udea8 CVE-2026-82857 \u2014 CVSS 9.3 CRITICAL\n\nhulumi versions before v1.3.2 contain a privilege escalation vulnerability in the weekly integration IAM po...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82857\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:07:48.924980Z"} {"uuid": "17814c6d-f6c0-4a1d-97e2-0fb9ddab62ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82857", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenwpvjrw25", "content": "\ud83d\udea8 CVE-2026-82857 \u2014 CVSS 9.3 CRITICAL\n\nhulumi versions before v1.3.2 contain a privilege escalation vulnerability in the weekly integration IAM po...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82857\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:07:48.924980Z"} https://vulnerability.circl.lu/sighting/17814c6d-f6c0-4a1d-97e2-0fb9ddab62ba/export Mon, 31 Aug 2026 10:07:48 +0000 https://vulnerability.circl.lu/sighting/e0bb7188-68f0-4451-ba4b-d5c7911cbdb7/export {"uuid": "e0bb7188-68f0-4451-ba4b-d5c7911cbdb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82856", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenwhmlrx2f", "content": "\ud83d\udea8 CVE-2026-82856 \u2014 CVSS 9.3 CRITICAL\n\n@hulumi/policies versions before 1.3.2 fail to properly validate set-qualified AWS IAM condition operators ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82856\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:07:39.801021Z"} {"uuid": "e0bb7188-68f0-4451-ba4b-d5c7911cbdb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82856", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenwhmlrx2f", "content": "\ud83d\udea8 CVE-2026-82856 \u2014 CVSS 9.3 CRITICAL\n\n@hulumi/policies versions before 1.3.2 fail to properly validate set-qualified AWS IAM condition operators ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82856\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:07:39.801021Z"} https://vulnerability.circl.lu/sighting/e0bb7188-68f0-4451-ba4b-d5c7911cbdb7/export Mon, 31 Aug 2026 10:07:39 +0000 https://vulnerability.circl.lu/sighting/4c4f32da-3db5-4e44-b10e-fa49671e604a/export {"uuid": "4c4f32da-3db5-4e44-b10e-fa49671e604a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82855", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenw7p7ra24", "content": "\ud83d\udea8 CVE-2026-82855 \u2014 CVSS 9.3 CRITICAL\n\n@hulumi/policies versions before 1.3.2 contain an evidence validation bypass vulnerability in Cloudflare an...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82855\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:07:31.728133Z"} {"uuid": "4c4f32da-3db5-4e44-b10e-fa49671e604a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82855", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenw7p7ra24", "content": "\ud83d\udea8 CVE-2026-82855 \u2014 CVSS 9.3 CRITICAL\n\n@hulumi/policies versions before 1.3.2 contain an evidence validation bypass vulnerability in Cloudflare an...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82855\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:07:31.728133Z"} https://vulnerability.circl.lu/sighting/4c4f32da-3db5-4e44-b10e-fa49671e604a/export Mon, 31 Aug 2026 10:07:31 +0000 https://vulnerability.circl.lu/sighting/7847242f-f12a-495a-b867-ed3997d7b0f7/export {"uuid": "7847242f-f12a-495a-b867-ed3997d7b0f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82854", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenvxe2542b", "content": "\ud83d\udea8 CVE-2026-82854 \u2014 CVSS 9.3 CRITICAL\n\nNodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.size param...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82854\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:07:22.704574Z"} {"uuid": "7847242f-f12a-495a-b867-ed3997d7b0f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82854", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenvxe2542b", "content": "\ud83d\udea8 CVE-2026-82854 \u2014 CVSS 9.3 CRITICAL\n\nNodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.size param...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82854\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:07:22.704574Z"} https://vulnerability.circl.lu/sighting/7847242f-f12a-495a-b867-ed3997d7b0f7/export Mon, 31 Aug 2026 10:07:22 +0000 https://vulnerability.circl.lu/sighting/458754a3-2697-480d-b991-6acc5915e99a/export {"uuid": "458754a3-2697-480d-b991-6acc5915e99a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82858", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muenixwa5r2m", "content": "CVE-2026-82858 - drift\nVersions of the @hulumi/drift package older than 1.3.2 can accept execution plans that come from outside sources without properly checking where they originated. This lets an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#drift #hulumi #CVE #infosec", "creation_timestamp": "2026-08-31T10:00:07.008465Z"} {"uuid": "458754a3-2697-480d-b991-6acc5915e99a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82858", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muenixwa5r2m", "content": "CVE-2026-82858 - drift\nVersions of the @hulumi/drift package older than 1.3.2 can accept execution plans that come from outside sources without properly checking where they originated. This lets an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#drift #hulumi #CVE #infosec", "creation_timestamp": "2026-08-31T10:00:07.008465Z"} https://vulnerability.circl.lu/sighting/458754a3-2697-480d-b991-6acc5915e99a/export Mon, 31 Aug 2026 10:00:07 +0000 https://vulnerability.circl.lu/sighting/0967a344-a913-4cae-a5cb-7c6790505ca0/export {"uuid": "0967a344-a913-4cae-a5cb-7c6790505ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82857", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mueniwgefj25", "content": "CVE-2026-82857 - hulumi\nVersions of Hulumi released before 1.3.2 allow a user with certain permissions to add or change roles that control access to resources, without proper limits. This means an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hulumi #kerberosmansour #CVE #infosec", "creation_timestamp": "2026-08-31T10:00:05.747042Z"} {"uuid": "0967a344-a913-4cae-a5cb-7c6790505ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82857", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mueniwgefj25", "content": "CVE-2026-82857 - hulumi\nVersions of Hulumi released before 1.3.2 allow a user with certain permissions to add or change roles that control access to resources, without proper limits. This means an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hulumi #kerberosmansour #CVE #infosec", "creation_timestamp": "2026-08-31T10:00:05.747042Z"} https://vulnerability.circl.lu/sighting/0967a344-a913-4cae-a5cb-7c6790505ca0/export Mon, 31 Aug 2026 10:00:05 +0000