<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-29T16:20:45.270333+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/30fa0a27-d457-4ca4-8747-42cf3989a8aa/export</id>
    <title>30fa0a27-d457-4ca4-8747-42cf3989a8aa</title>
    <updated>2026-06-29T16:20:45.274780+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "30fa0a27-d457-4ca4-8747-42cf3989a8aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-264p-99wq-f4j6", "type": "seen", "source": "https://gist.github.com/safer-bot/c3d37218b11c97a4e6892cc8227f2a75", "content": "", "creation_timestamp": "2025-07-16T15:25:48.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/30fa0a27-d457-4ca4-8747-42cf3989a8aa/export"/>
    <published>2025-07-16T15:25:48+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2c993842-72ff-4f32-854d-26975373e397/export</id>
    <title>2c993842-72ff-4f32-854d-26975373e397</title>
    <updated>2026-06-29T16:20:45.276118+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2c993842-72ff-4f32-854d-26975373e397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-264p-99wq-f4j6", "type": "seen", "source": "https://gist.github.com/safer-bot/8978b70b7a8d7d0e26a4583e47ba4b17", "content": "", "creation_timestamp": "2025-07-16T10:08:23.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2c993842-72ff-4f32-854d-26975373e397/export"/>
    <published>2025-07-16T10:08:23+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f85079b7-0cdb-47fe-bea8-026aa024c872/export</id>
    <title>f85079b7-0cdb-47fe-bea8-026aa024c872</title>
    <updated>2026-06-29T16:20:45.276249+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f85079b7-0cdb-47fe-bea8-026aa024c872", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-264P-99WQ-F4J6", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18539", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-21634\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: Amazon Ion is a Java implementation of the Ion data notation. Prior to version 1.10.5, a potential denial-of-service issue exists in\u00a0`ion-java`\u00a0for applications that use\u00a0`ion-java`\u00a0to deserialize Ion text encoded data, or deserialize Ion text or binary encoded data into the\u00a0`IonValue`\u00a0model and then invoke certain\u00a0`IonValue`\u00a0methods on that in-memory representation. An actor could craft Ion data that, when loaded by the affected application and/or processed using the\u00a0`IonValue`\u00a0model, results in a\u00a0`StackOverflowError`\u00a0originating from the\u00a0`ion-java`\u00a0library. The patch is included in `ion-java` 1.10.5. As a workaround, do not load data which originated from an untrusted source or that could have been tampered with.\n\ud83d\udccf Published: 2024-01-03T22:46:03.585Z\n\ud83d\udccf Modified: 2025-06-16T19:45:37.088Z\n\ud83d\udd17 References:\n1. https://github.com/amazon-ion/ion-java/security/advisories/GHSA-264p-99wq-f4j6", "creation_timestamp": "2025-06-16T20:37:27.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f85079b7-0cdb-47fe-bea8-026aa024c872/export"/>
    <published>2025-06-16T20:37:27+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1691be0d-252b-4d31-ba84-75d01432fd37/export</id>
    <title>1691be0d-252b-4d31-ba84-75d01432fd37</title>
    <updated>2026-06-29T16:20:45.276362+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1691be0d-252b-4d31-ba84-75d01432fd37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-264P-99WQ-F4J6", "type": "seen", "source": "https://t.me/arpsyndicate/2491", "content": "#ExploitObserverAlert\n\nGHSA-264p-99wq-f4j6\n\nDESCRIPTION: Exploit Observer has 1 entries related to GHSA-264P-99WQ-F4J6. A potential denial-of-service issue exists in\u00a0ion-java\u00a0for applications that use\u00a0ion-java\u00a0to:\n\nGHSS: 7.5", "creation_timestamp": "2024-01-05T16:20:12.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1691be0d-252b-4d31-ba84-75d01432fd37/export"/>
    <published>2024-01-05T16:20:12+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/82b474ca-4a34-47a5-841b-4c78e8b65273/export</id>
    <title>82b474ca-4a34-47a5-841b-4c78e8b65273</title>
    <updated>2026-06-29T16:20:45.276461+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "82b474ca-4a34-47a5-841b-4c78e8b65273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-264P-99WQ-F4J6", "type": "seen", "source": "https://t.me/ctinow/162661", "content": "https://ift.tt/R4xSejK\n[GHSA-264p-99wq-f4j6] Ion Java StackOverflow vulnerability", "creation_timestamp": "2024-01-03T23:22:08.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/82b474ca-4a34-47a5-841b-4c78e8b65273/export"/>
    <published>2024-01-03T23:22:08+00:00</published>
  </entry>
</feed>
