https://vulnerability.circl.lu/sightings/feed 2026-07-23T07:26:20.588821+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/be268c34-4470-4569-aa3a-d3a3e573be78/export 2026-07-23T07:26:20.613627+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "be268c34-4470-4569-aa3a-d3a3e573be78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47731", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrammowolp2a", "content": "CVE-2026-47731 - ait-core\nAn attacker can access and modify files on a NASA AMMOS Instrument Toolkit server without a password, potentially leading to data corruption or exposure. This can happen if\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#aitcore #nasaammos #pip #CVE #infosec", "creation_timestamp": "2026-07-22T15:18:04.627002Z"} 2026-07-22T15:18:04.627002+00:00 https://vulnerability.circl.lu/sighting/531b838e-1763-479f-b9cc-74b4a5b34572/export 2026-07-23T07:26:20.615307+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "531b838e-1763-479f-b9cc-74b4a5b34572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47735", "type": "seen", "source": "https://bsky.app/profile/nachovdk.bsky.social/post/3mpgpuvxvpc22", "content": "#Arc 26.06.2 shipped today.\n\nFIPS 140-3 build for defense and regulated environments. Signed supply chain: SBOMs, cosign, SLSA Level 3 provenance. CVE-2026-47735 fully closed.\n\nPerformance: single-hour flush 16ms \u2192 1.25ms, 201MB \u2192 0B allocated. Ingest 20.0M \u2192 20.9M rec/s.\n\nDrop-in upgrade.", "creation_timestamp": "2026-06-29T14:41:58.468109Z"} 2026-06-29T14:41:58.468109+00:00 https://vulnerability.circl.lu/sighting/6d80c795-133e-4cdf-8d96-33e76fa2a536/export 2026-07-23T07:26:20.615446+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6d80c795-133e-4cdf-8d96-33e76fa2a536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47733", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp2xnkkgdz25", "content": "CVE-2026-47733 - Rocket.Chat: Missing URL protocol sanitization in ImageElement allows javascript: URLs in markdown images\nCVE ID : CVE-2026-47733\n \n Published : June 24, 2026, 8:51 p.m. | 53\u00a0minutes ago\n \n Description : Rocket.Chat is an open-source, secure, fully customizabl...", "creation_timestamp": "2026-06-24T22:29:10.770823Z"} 2026-06-24T22:29:10.770823+00:00 https://vulnerability.circl.lu/sighting/d21dcf1a-52f5-4262-b413-ebe7dcb1b87f/export 2026-07-23T07:26:20.615560+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d21dcf1a-52f5-4262-b413-ebe7dcb1b87f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47734", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mny4r2t3xu2i", "content": "CVE-2026-47734 - Dulwich has unbounded memory allocation in receive-pack from crafted thin packs\nCVE ID : CVE-2026-47734\n \n Published : June 10, 2026, 11:16 p.m. | 2\u00a0hours, 1\u00a0minute ago\n \n Description : Dulwich is a pure-Python implementation of the Git file formats and protoc...", "creation_timestamp": "2026-06-11T01:57:18.342148Z"} 2026-06-11T01:57:18.342148+00:00 https://vulnerability.circl.lu/sighting/a85b1dda-8e88-4e0d-8612-6b163ddbdbd7/export 2026-07-23T07:26:20.615661+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a85b1dda-8e88-4e0d-8612-6b163ddbdbd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47732", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmbpcmjit42m", "content": "\ud83d\udd10 CVE-2026-47732: Sandbox: multiple `__toString()` policy bypasses via unguarded string coercion points\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-47732-sandbox-multiple-tostring-policy-bypasses-via-unguarded-string-coercion-points", "creation_timestamp": "2026-05-20T10:33:02.500520Z"} 2026-05-20T10:33:02.500520+00:00 https://vulnerability.circl.lu/sighting/308b624b-009d-41be-8066-d42165c2a1d6/export 2026-07-23T07:26:20.615760+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "308b624b-009d-41be-8066-d42165c2a1d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47730", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmbpc6qxek26", "content": "\ud83d\udd10 CVE-2026-47730: XSS in profiler HtmlDumper via unescaped template and profile names\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-47730-xss-in-profiler-htmldumper-via-unescaped-template-and-profile-names", "creation_timestamp": "2026-05-20T10:32:34.453923Z"} 2026-05-20T10:32:34.453923+00:00 https://vulnerability.circl.lu/sighting/494ac0d1-486f-4b1b-88ac-80e53d527d51/export 2026-07-23T07:26:20.615861+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "494ac0d1-486f-4b1b-88ac-80e53d527d51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47731", "type": "published-proof-of-concept", "source": "https://github.com/NASA-AMMOS/AIT-Core/security/advisories/GHSA-p462-prxw-mjx4", "content": "", "creation_timestamp": "2026-05-19T22:10:29.000000Z"} 2026-05-19T22:10:29+00:00