https://vulnerability.circl.lu/sightings/feed 2026-10-09T13:42:28.844995+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/1af3ab6c-28ca-4014-a2c1-8bfd8649a5ca/export 2026-10-09T13:42:28.869251+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1af3ab6c-28ca-4014-a2c1-8bfd8649a5ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107703", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxfb76zn7d2l", "content": "\ud83d\udea8 CVE-2026-107703 \u2014 CVSS 9.3 CRITICAL\n\n@enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js that allows...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-107703\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-08T20:08:08.574573Z"} 2026-10-08T20:08:08.574573+00:00 https://vulnerability.circl.lu/sighting/adccf85b-827f-4c01-93e3-82c6c9d4eca6/export 2026-10-09T13:42:28.871882+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "adccf85b-827f-4c01-93e3-82c6c9d4eca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107703", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxfaqsesqp24", "content": "CVE-2026-107703 - @enmaso/node-convert\nThe @enmaso/node-convert library (versions up to 1.0.0) runs ImageMagick commands without cleaning the file path and conversion options. An attacker who can control those inputs\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#enmaso #CVE #infosec", "creation_timestamp": "2026-10-08T20:00:05.824888Z"} 2026-10-08T20:00:05.824888+00:00 https://vulnerability.circl.lu/sighting/5305b774-d5ed-40f8-ba60-a756527be714/export 2026-10-09T13:42:28.872150+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5305b774-d5ed-40f8-ba60-a756527be714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107703", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxf76zwoaq24", "content": "\ud83d\udd34 CVE-2026-107703 - Critical (9.8)\n\n@enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-107703/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-08T19:32:16.421640Z"} 2026-10-08T19:32:16.421640+00:00