https://vulnerability.circl.lu/sightings/feed 2026-08-23T08:57:24.198110+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/f19266ea-22e0-4057-af4a-80e03c9b8574/export 2026-08-23T08:57:24.215591+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f19266ea-22e0-4057-af4a-80e03c9b8574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62681", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtocsko7op2y", "content": "CVE-2026-62681\nIf you use the Orval tool to create JavaScript API clients and are on a version before 8.21.0, a specially crafted API path can insert malicious code into the generated request functions. When those functions\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T12:50:04.055537Z"} 2026-08-22T12:50:04.055537+00:00 https://vulnerability.circl.lu/sighting/5cc42617-8a6a-469c-a428-4ce5d2154f89/export 2026-08-23T08:57:24.218906+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5cc42617-8a6a-469c-a428-4ce5d2154f89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62681", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mthxw36wcp23", "content": "Orval Turns Your Build Pipeline Into a Malicious Code Factory\nPANIC 74% | Lag 0.0h | CVE-2026-62681 affects Orval, where crafted OpenAPI input can inject malicious JavaScript into gener\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-20T00:19:11.888034Z"} 2026-08-20T00:19:11.888034+00:00 https://vulnerability.circl.lu/sighting/c8682a42-8ac9-4747-9063-0cf468ab70a7/export 2026-08-23T08:57:24.219065+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c8682a42-8ac9-4747-9063-0cf468ab70a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62681", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthwbzkmpm2u", "content": "CVE-2026-62681 - orval\nOrval, a tool for generating TypeScript clients, has a bug that allows attackers to inject malicious code into generated JavaScript. This could lead to code execution on the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#orval #orvallabs #CVE #infosec", "creation_timestamp": "2026-08-19T23:50:05.464655Z"} 2026-08-19T23:50:05.464655+00:00 https://vulnerability.circl.lu/sighting/27df384a-fd81-485e-b8e5-b0491f7712c7/export 2026-08-23T08:57:24.219186+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "27df384a-fd81-485e-b8e5-b0491f7712c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62681", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthjy3k6bq2t", "content": "\ud83d\udea8 CVE-2026-62681 \u2014 CVSS 9.3 CRITICAL\n\nOrval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. P...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62681\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T20:09:46.710209Z"} 2026-08-19T20:09:46.710209+00:00