https://vulnerability.circl.lu/sightings/feed 2026-06-15T07:50:10.241000+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/02c0495a-6873-43ab-af8a-8f130ac34f9e/export 2026-06-15T07:50:10.266643+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "02c0495a-6873-43ab-af8a-8f130ac34f9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-45303", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-4vrc-m9ch-6m3r", "content": "", "creation_timestamp": "2026-05-08T20:57:40.000000Z"} 2026-05-08T20:57:40+00:00 https://vulnerability.circl.lu/sighting/29e9cb8a-c057-4c60-9ecd-362124a0bb97/export 2026-06-15T07:50:10.266547+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "29e9cb8a-c057-4c60-9ecd-362124a0bb97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-45300", "type": "published-proof-of-concept", "source": "https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-fmxf-pm6p-7xgm", "content": "", "creation_timestamp": "2026-05-12T21:02:02.000000Z"} 2026-05-12T21:02:02+00:00 https://vulnerability.circl.lu/sighting/18c4bfd1-7daf-49cc-a838-ec0f0aad6b6a/export 2026-06-15T07:50:10.265587+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "18c4bfd1-7daf-49cc-a838-ec0f0aad6b6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-45306", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-w727-595x-pc3r", "content": "", "creation_timestamp": "2026-05-14T20:17:27.000000Z"} 2026-05-14T20:17:27+00:00 https://vulnerability.circl.lu/sighting/eb86e4d5-0177-4e83-9d54-2c68e460aa1a/export 2026-06-15T07:50:10.265509+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "eb86e4d5-0177-4e83-9d54-2c68e460aa1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45303", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlwljnotjv2n", "content": "CVE-2026-45303 - Open WebUI: Stored XSS via the HTML renedering view\nCVE ID : CVE-2026-45303\n \n Published : May 15, 2026, 10:16 p.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Pri...", "creation_timestamp": "2026-05-16T00:25:52.929913Z"} 2026-05-16T00:25:52.929913+00:00 https://vulnerability.circl.lu/sighting/861f1611-e6b5-4399-bc9c-75587e9b620f/export 2026-06-15T07:50:10.265435+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "861f1611-e6b5-4399-bc9c-75587e9b620f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-45304", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmbqvwpzgz2u", "content": "\ud83d\udd10 CVE-2026-45304: YAML Parser Exponential Memory Allocation via Recursive Collection-Alias Expansion (\"Billion Laughs\")\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-45304-yaml-parser-exponential-memory-allocation-via-recursive-collection-alias-expansion-billion-laughs", "creation_timestamp": "2026-05-20T11:01:30.942875Z"} 2026-05-20T11:01:30.942875+00:00 https://vulnerability.circl.lu/sighting/146994bc-8842-4d39-936c-e6924a8aade1/export 2026-06-15T07:50:10.265359+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "146994bc-8842-4d39-936c-e6924a8aade1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-45305", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmbqw55zbs2b", "content": "\ud83d\udd10 CVE-2026-45305: YAML Parser ReDoS via Catastrophic Backtracking in Parser::cleanup() Regex\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-45305-yaml-parser-redos-via-catastrophic-backtracking-in-parser-cleanup-regex", "creation_timestamp": "2026-05-20T11:01:41.071087Z"} 2026-05-20T11:01:41.071087+00:00 https://vulnerability.circl.lu/sighting/9a7c4987-15cb-4c91-82cf-a39693bf67a7/export 2026-06-15T07:50:10.265287+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9a7c4987-15cb-4c91-82cf-a39693bf67a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45301", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmbxwk4kdn2s", "content": "\ud83d\udccc CVE-2026-45301 - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.3.16, a missing permission check in all ... https://www.cyberhub.blog/cves/CVE-2026-45301", "creation_timestamp": "2026-05-20T13:07:07.627855Z"} 2026-05-20T13:07:07.627855+00:00 https://vulnerability.circl.lu/sighting/525a1397-46b9-4f0b-be86-94aa715cf8c8/export 2026-06-15T07:50:10.265205+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "525a1397-46b9-4f0b-be86-94aa715cf8c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45304", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmc3qc4eg22q", "content": "\ud83d\udd17 CVE : CVE-2026-45070, CVE-2026-45077, CVE-2026-45304, CVE-2026-45305, CVE-2026-45753, CVE-2026-45754, CVE-2026-45755, CVE-2026-45756, CVE-2026-46626, CVE-2026-47212", "creation_timestamp": "2026-05-20T14:15:12.957796Z"} 2026-05-20T14:15:12.957796+00:00 https://vulnerability.circl.lu/sighting/f7bb16ec-b55b-45b5-acf0-257af5db31c2/export 2026-06-15T07:50:10.265098+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f7bb16ec-b55b-45b5-acf0-257af5db31c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45305", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmc3qc4eg22q", "content": "\ud83d\udd17 CVE : CVE-2026-45070, CVE-2026-45077, CVE-2026-45304, CVE-2026-45305, CVE-2026-45753, CVE-2026-45754, CVE-2026-45755, CVE-2026-45756, CVE-2026-46626, CVE-2026-47212", "creation_timestamp": "2026-05-20T14:15:13.088251Z"} 2026-05-20T14:15:13.088251+00:00 https://vulnerability.circl.lu/sighting/4b52b411-3ca8-4212-98db-77c22e4ed657/export 2026-06-15T07:50:10.262658+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4b52b411-3ca8-4212-98db-77c22e4ed657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45300", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnl2nqfonh2z", "content": "CVE-2026-45300 - async-http-client: Cookie header not stripped on cross-origin redirect\nCVE ID : CVE-2026-45300\n \n Published : June 5, 2026, 8:17 p.m. | 15\u00a0minutes ago\n \n Description : The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests a...", "creation_timestamp": "2026-06-05T21:15:07.032356Z"} 2026-06-05T21:15:07.032356+00:00