<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-25T17:14:26.635443+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d8a7ebdc-55d5-4ac6-a5f2-d7f8b1e90560/export</id>
    <title>d8a7ebdc-55d5-4ac6-a5f2-d7f8b1e90560</title>
    <updated>2026-09-25T17:14:26.655593+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d8a7ebdc-55d5-4ac6-a5f2-d7f8b1e90560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96755", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw7ytr7wkn2i", "content": "CVE-2026-96755 - orval\nThe @orval/effect part of orval (versions 8.14.0 to 8.28.1) can execute malicious JavaScript that an attacker embeds in an API description. This happens when the tool turns certain\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#orval #orvallabs #CVE #infosec", "creation_timestamp": "2026-09-24T00:30:05.758287Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d8a7ebdc-55d5-4ac6-a5f2-d7f8b1e90560/export"/>
    <published>2026-09-24T00:30:05.758287+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b4b8d273-bbb4-4184-ae32-70b9cd8e953a/export</id>
    <title>b4b8d273-bbb4-4184-ae32-70b9cd8e953a</title>
    <updated>2026-09-25T17:14:26.659725+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b4b8d273-bbb4-4184-ae32-70b9cd8e953a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96755", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw7djtmobm2l", "content": "\ud83d\udea8 CVE-2026-96755 \u2014 CVSS 9.3 CRITICAL\n\norval versions 8.14.0 through 8.28.1 contain a code injection vulnerability in the @orval/effect generator ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-96755\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-23T18:08:43.577458Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b4b8d273-bbb4-4184-ae32-70b9cd8e953a/export"/>
    <published>2026-09-23T18:08:43.577458+00:00</published>
  </entry>
</feed>
