{"vulnerability": "cve-2026-17613", "sightings": [{"uuid": "5d5ebf43-40c5-41c9-a975-2d78f71b3eb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17613", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mw7bjbcacc2d", "content": "CVE-2026-17613: Penpot cross-team file takeover via import-binfile (unpatched in 2.17.2)\n\nPosted by Louis Sanchez via Fulldisclosure on Sep 22Posting this as an update rather than a first disclosure. The advisory \nwent public on 2026-08-04 with no vendor fix. Penpot has shipped tw\u2026\n#hackernews #news", "creation_timestamp": "2026-09-23T17:32:37.000969Z"}]}