https://vulnerability.circl.lu/sightings/feed 2026-09-23T16:04:15.377118+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/e5205b31-b6f2-4111-aa04-e4d59fe733a6/export 2026-09-23T16:04:15.402102+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e5205b31-b6f2-4111-aa04-e4d59fe733a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78847", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mw4mcq6wg62w", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-78847: An issue in gray-matter All versions (verified on 4.0.3) allows the JavaScript engine in lib/engines.js using eval() to parse front matter when \u2026\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-78847\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-22T16:07:49.244830Z"} 2026-09-22T16:07:49.244830+00:00 https://vulnerability.circl.lu/sighting/317ea265-8eb0-4b7b-b92d-f0c5caa9fe02/export 2026-09-23T16:04:15.404483+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "317ea265-8eb0-4b7b-b92d-f0c5caa9fe02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78847", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw4luv2dto2j", "content": "CVE-2026-78847\nIf your application uses gray-matter to read front\u2011matter and allows the language to be set to JavaScript, the library may execute that code automatically. This could let an attacker run arbitrary commands on\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-22T16:00:04.504826Z"} 2026-09-22T16:00:04.504826+00:00