{"vulnerability": "cve-2026-105691", "sightings": [{"uuid": "704dd523-f405-44ba-bbb3-b40725e968cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105691", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx5r6f4aqf2b", "content": "\ud83d\udd34 CVE-2026-105691 - Critical (9.9)\n\nPenpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter place...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105691/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-05T20:32:44.279149Z"}, {"uuid": "7a05afd3-61f5-4d16-8b79-e0e98f04a348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105691", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx5widuqf327", "content": "\ud83d\udea8 CVE-2026-105691 \u2014 CVSS 9.9 CRITICAL\n\nPenpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attac...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105691\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T22:07:46.412119Z"}, {"uuid": "b60f071d-2518-42f0-918a-c791f054c80c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105691", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxchdwwt3b2l", "content": "CVE-2026-105691\nIf a user can edit a design in Penpot, they can insert special text into a color setting that causes the system to run unintended commands when the file is exported as SVG. This can be triggered even through a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-07T17:20:11.269075Z"}]}