{"vulnerability": "cve-2026-4929", "sightings": [{"uuid": "4224fd12-9f1a-4c26-80bd-07b875e1d39b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49298", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mn5o73vqfo2o", "content": "CVE-2026-49298: Apache Airflow: JWT Token Exposure in KubernetesExecutor Command-Line Arguments", "creation_timestamp": "2026-05-31T13:27:29.824600Z"}, {"uuid": "caadd3ca-6459-42d1-8493-0d0b4112142a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49295", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moodmsmybf2i", "content": "CVE-2026-49295 - libde265 has an out-of-bounds write in process_reference_picture_set via predicted short-term RPS\nCVE ID : CVE-2026-49295\n \n Published : June 19, 2026, 8:09 p.m. | 1\u00a0hour, 33\u00a0minutes ago\n \n Description : libde265 is an open source implementation of the h.265 v...", "creation_timestamp": "2026-06-19T21:58:46.510536Z"}, {"uuid": "98f3eacd-4a05-4c38-9ea4-da24ac257255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49293", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mou4vxh2ex2c", "content": "CVE-2026-49293 - High severity DoS in js-toml parser. O(n\u00b2) BigInt operations allow resource exhaustion via crafted TOML input. CVSS 7.5. No patch yet. Update or monitor usage. #CVE #infosec #javascript\n\nhttps://www.valtersit.com/cve/CVE-2026-49293/", "creation_timestamp": "2026-06-22T05:14:35.394347Z"}]}