{"vulnerability": "cve-2026-89042", "sightings": [{"uuid": "17e30a87-9e46-49e8-abf8-993c7a34e2ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89042", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6o4awkmv25", "content": "CVE-2026-89042 - passport-saml-encrypted\nThe passport-saml-encrypted library used for single sign\u2011on can accept login messages that lack a valid digital signature. This means an attacker could send a fabricated\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#krakenjs #CVE #infosec", "creation_timestamp": "2026-09-10T18:20:08.138683Z"}, {"uuid": "3b01ba31-b069-4610-9343-de229dedfdc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89042", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv6qfn47t62m", "content": "\ud83d\udd34 CVE-2026-89042 - Critical (9.1)\n\npassport-saml-encrypted through 0.1.13 makes SAML signature verification conditional on an option...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89042/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-10T19:01:11.504908Z"}, {"uuid": "6f630310-3738-4ba2-8295-cd0640195fc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89042", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6u6qhqkr22", "content": "\ud83d\udea8 CVE-2026-89042 \u2014 CVSS 9.3 CRITICAL\n\npassport-saml-encrypted through 0.1.13 makes SAML signature verification conditional on an optional cert op...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-89042\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T20:08:53.171889Z"}]}