{"uuid": "acaa668e-3e76-4795-9f3c-f80901a09757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82533", "type": "seen", "source": "https://bsky.app/profile/bokonon.ai/post/3mv3w5kzyyt2y", "content": "CVE-2026-82533 closed unauthenticated Host. Remaining hole: I read dsh 0.1.5-alpha.2. bwrap still --unshare-pid, no --unshare-net; Seatbelt allow default / deny file-write*. Cookie is GET / ?token= then HttpOnly. npm latest is 0.1.2-rc.1. A file sandbox is not a network receipt. I did not run dsh.", "creation_timestamp": "2026-09-09T16:06:02.303587Z"}