{"vulnerability": "cve-2026-10522", "sightings": [{"uuid": "094f8a5c-7800-43d0-818a-3ce24c903990", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105220", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx3kobkgih2g", "content": "\ud83d\udfe0 CVE-2026-105220 - High (7.8)\n\nTwine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in importStories() t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105220/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-04T23:31:02.071355Z"}, {"uuid": "877e4fae-327d-40ce-856d-d80752cd12aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105220", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7zbjt5m7tctb4", "content": "CVE-2026-105220 - Twine 2 Desktop through 2.12.0 Arbitrary Code Execution via Imported Story Files\nCVE ID : CVE-2026-105220\n \n Published : Oct. 4, 2026, 10:31 p.m. | 37\u00a0minutes ago\n \n Description : Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in...", "creation_timestamp": "2026-10-04T23:33:44.665642Z"}, {"uuid": "ddc9ded6-9456-48f5-af1a-ba74d2642324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105222", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2kfy4ksilxt4z", "content": "CVE-2026-105222 - alexpechkarev/google-maps through 12.16 Disabled TLS Certificate Verification via ssl_verify_peer\nCVE ID : CVE-2026-105222\n \n Published : Oct. 4, 2026, 10:31 p.m. | 37\u00a0minutes ago\n \n Description : The alexpechkarev/google-maps Laravel package through 12.16 di...", "creation_timestamp": "2026-10-04T23:39:44.474733Z"}, {"uuid": "7bfb9b51-8aca-4749-b08f-568b897f8cea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105221", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gnml3k5zl2dyu", "content": "CVE-2026-105221 - Gist RubyGem before 6.1.0 Disabled TLS Certificate Verification\nCVE ID : CVE-2026-105221\n \n Published : Oct. 4, 2026, 10:31 p.m. | 37\u00a0minutes ago\n \n Description : The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that all...", "creation_timestamp": "2026-10-04T23:45:44.294185Z"}, {"uuid": "ca953d72-a8b7-4c14-bda0-65c432aba354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105222", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117385359315425699", "content": "CVE-2026-105222: CRITICAL vuln in alexpechkarev/google-maps (v1.0.3 \u2013 12.16). TLS cert checks off by default \u2014 API keys can leak, responses tampered. Set ssl_verify_peer=TRUE. Patch status unknown. https://radar.offseq.com/threat/cve-2026-105222-improper-certificate-validation-in-alexpechkarev-google-maps-f327aeed77a71a14 #OffSeq #Vulnerability #Laravel #CVE2026_105222", "creation_timestamp": "2026-10-05T00:00:37.562377Z"}, {"uuid": "051c1213-b7c4-426e-bf67-06ae2940c3fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105222", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx3mdb6vpx2a", "content": "CRITICAL: alexpechkarev/google-maps v1.0.3 \u2013 12.16 disables TLS cert validation by default. API keys at risk; responses can be altered. Enable ssl_verify_peer=TRUE until a fix. Details: https://radar.offseq.com/threat/cve-2026-105222-improper-certificate-validation-in-alexpechkarev-google-maps-f3...", "creation_timestamp": "2026-10-05T00:00:39.384627Z"}, {"uuid": "6d32de2c-5035-410e-8dbe-e1f28c544de5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105221", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx3mp25wbz2z", "content": "\ud83d\udea8 CVE-2026-105221 \u2014 CVSS 9.1 CRITICAL\n\nThe gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105221\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T00:07:14.312081Z"}, {"uuid": "aef1311b-cf10-4139-8926-3f2c173118a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105222", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx3mpc33tz2z", "content": "\ud83d\udea8 CVE-2026-105222 \u2014 CVSS 9.1 CRITICAL\n\nThe alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by defaul...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105222\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T00:07:22.574023Z"}, {"uuid": "3df78593-280e-4957-8f66-e38c8ed9e3e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105223", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117385712345555544", "content": "CVE-2026-105223 (CRITICAL, CVSS 9.1): maclof kubernetes-client v0.17.0 \u2013 0.31.x disables TLS cert validation if certificate-authority-data is missing, risking API server impersonation and credential theft. Check configs & vendor advisories. https://radar.offseq.com/threat/cve-2026-105223-improper-certificate-validation-in-maclof-kubernetes-client-8fb4f3aba9271610 #OffSeq #kubernetes #security", "creation_timestamp": "2026-10-05T01:30:24.357081Z"}, {"uuid": "09632ca1-3f28-4c97-9a0e-6afd769fd128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105223", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx3rdsgai32w", "content": "maclof kubernetes-client v0.17.0 \u2013 0.31.x hit by CRITICAL vuln: TLS cert checks bypassed, enabling API server impersonation & token theft. Avoid affected versions or enforce proper certs until patch lands. https://radar.offseq.com/threat/cve-2026-105223-improper-certificate-validation-in-maclof-k...", "creation_timestamp": "2026-10-05T01:30:26.596652Z"}, {"uuid": "65f1a0b2-6174-4789-9c4b-26c2eba2cff8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105223", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx3tfm7su62l", "content": "\ud83d\udea8 CVE-2026-105223 \u2014 CVSS 9.1 CRITICAL\n\nmaclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() an...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105223\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T02:07:13.754098Z"}]}