https://vulnerability.circl.lu/sightings/feed 2026-09-25T03:53:15.426475+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/fa4cad40-8566-4eb6-8908-4a5d87a166f9/export 2026-09-25T03:53:15.452831+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "fa4cad40-8566-4eb6-8908-4a5d87a166f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49213", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqemh2jf552m", "content": "\ud83d\udfe0 CVE-2026-49213 - High (8.1)\n\nTypeBot is a chatbot builder tool. Prior to 3.17.2, Typebot's shared SSRF validator in packages/l...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49213/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-11T12:00:23.066358Z"} 2026-07-11T12:00:23.066358+00:00 https://vulnerability.circl.lu/sighting/7595b434-8e08-4179-a7ae-29ddc450b868/export 2026-09-25T03:53:15.454801+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7595b434-8e08-4179-a7ae-29ddc450b868", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49214", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnzgowdf7j24", "content": "CVE-2026-49214 - guzzlehttp/psr7 has CRLF Injection via URI Host Component\nCVE ID : CVE-2026-49214\n \n Published : June 11, 2026, 12:38 p.m. | 41\u00a0minutes ago\n \n Description : guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Versions prior to 2.10.2 did not...", "creation_timestamp": "2026-06-11T14:27:43.786926Z"} 2026-06-11T14:27:43.786926+00:00 https://vulnerability.circl.lu/sighting/0547c5b4-c79d-418a-86b1-f39a201489b6/export 2026-09-25T03:53:15.454950+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0547c5b4-c79d-418a-86b1-f39a201489b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49218", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mny5i4wo5u2v", "content": "CVE-2026-49218 - ImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensions\nCVE ID : CVE-2026-49218\n \n Published : June 10, 2026, 11:16 p.m. | 2\u00a0hours, 1\u00a0minute ago\n \n Description : ImageMagick is free and open-source software used for editing and ...", "creation_timestamp": "2026-06-11T02:10:12.483746Z"} 2026-06-11T02:10:12.483746+00:00 https://vulnerability.circl.lu/sighting/556ebfbd-3120-4f9d-83ed-6af5a39a20ff/export 2026-09-25T03:53:15.455059+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "556ebfbd-3120-4f9d-83ed-6af5a39a20ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49218", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnxzkh72te2n", "content": "\ud83d\udfe0 CVE-2026-49218 - High (7.5)\n\nImageMagick is free and open-source software used for editing and manipulating digital images. Pr...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49218/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-11T00:59:56.400622Z"} 2026-06-11T00:59:56.400622+00:00 https://vulnerability.circl.lu/sighting/0c33abad-0282-40df-a5a5-8254abb8e0fd/export 2026-09-25T03:53:15.455159+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0c33abad-0282-40df-a5a5-8254abb8e0fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-49212", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmxzgyz6x62f", "content": "\ud83d\udd10 CVE-2026-49212: LiveComponentHydrator HMAC checksum lacks component and slot binding\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-49212-livecomponenthydrator-hmac-checksum-lacks-component-and-slot-binding", "creation_timestamp": "2026-05-29T07:32:47.930943Z"} 2026-05-29T07:32:47.930943+00:00 https://vulnerability.circl.lu/sighting/ef760df0-d3dd-4a03-8d89-acfd10df3cb7/export 2026-09-25T03:53:15.455259+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ef760df0-d3dd-4a03-8d89-acfd10df3cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-49216", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmxzgupjrn2c", "content": "\ud83d\udd10 CVE-2026-49216: XSS in symfony/ux-autocomplete via unescaped AJAX response data\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-49216-xss-in-symfony-ux-autocomplete-via-unescaped-ajax-response-data", "creation_timestamp": "2026-05-29T07:32:44.112670Z"} 2026-05-29T07:32:44.112670+00:00 https://vulnerability.circl.lu/sighting/48ffc934-4d6e-429e-9dcc-4b1544348fcd/export 2026-09-25T03:53:15.455353+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "48ffc934-4d6e-429e-9dcc-4b1544348fcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-49215", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmxzgqhaiq2p", "content": "\ud83d\udd10 CVE-2026-49215: CSRF Protection Bypass in symfony/ux-live-component: Accept Header is CORS-Safelisted\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-49215-csrf-protection-bypass-in-symfony-ux-live-component-accept-header-is-cors-safelisted", "creation_timestamp": "2026-05-29T07:32:39.122356Z"} 2026-05-29T07:32:39.122356+00:00 https://vulnerability.circl.lu/sighting/6b4bb9dc-a075-4ba5-9959-4a5ef08940b0/export 2026-09-25T03:53:15.455447+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6b4bb9dc-a075-4ba5-9959-4a5ef08940b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-49211", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmxzgmdwar2x", "content": "\ud83d\udd10 CVE-2026-49211: Information exposure via unescaped LIKE wildcards in EntitySearchUtil\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-49211-information-exposure-via-unescaped-like-wildcards-in-entitysearchutil", "creation_timestamp": "2026-05-29T07:32:34.756063Z"} 2026-05-29T07:32:34.756063+00:00 https://vulnerability.circl.lu/sighting/f4376174-7790-4477-a2ab-8742e0e07be5/export 2026-09-25T03:53:15.455541+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f4376174-7790-4477-a2ab-8742e0e07be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-49210", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmxzghhkd52e", "content": "\ud83d\udd10 CVE-2026-49210: XSS in symfony/ux-live-component via attacker-controlled child component tag\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-49210-xss-in-symfony-ux-live-component-via-attacker-controlled-child-component-tag", "creation_timestamp": "2026-05-29T07:32:30.007115Z"} 2026-05-29T07:32:30.007115+00:00