<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-29T15:28:23.274967+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/358526e8-ab9e-4ed8-b2ed-924c4e27b91a/export</id>
    <title>358526e8-ab9e-4ed8-b2ed-924c4e27b91a</title>
    <updated>2026-08-29T15:28:23.299057+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "358526e8-ab9e-4ed8-b2ed-924c4e27b91a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75337", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu7xqoa5ef2b", "content": "CVE-2026-75337\nThe web function that serves static files in Yu AI Code Mother version 4.3 does not check the file name properly. Because of this, anyone can request files from outside the intended folder and view their\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T13:20:04.380824Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/358526e8-ab9e-4ed8-b2ed-924c4e27b91a/export"/>
    <published>2026-08-29T13:20:04.380824+00:00</published>
  </entry>
</feed>
