https://vulnerability.circl.lu/sightings/feed 2026-09-19T06:19:02.217449+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/d07bac21-3c67-4fd5-a0cf-d725f5be7b3b/export 2026-09-19T06:19:02.231444+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d07bac21-3c67-4fd5-a0cf-d725f5be7b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93603", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvsz3zmtlq22", "content": "CVE-2026-93603 - vm2\nThe vm2 JavaScript sandbox (versions before 3.12.1) can mistakenly give untrusted code access to the host system's global objects. If your application exposes any non\u2011strict host\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-18T20:30:06.441798Z"} 2026-09-18T20:30:06.441798+00:00 https://vulnerability.circl.lu/sighting/60bfe364-85d0-47e3-9b25-22b6ed40a01b/export 2026-09-19T06:19:02.233469+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "60bfe364-85d0-47e3-9b25-22b6ed40a01b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93603", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvskgj25mf2j", "content": "\ud83d\udea8 CVE-2026-93603 \u2014 CVSS 10 CRITICAL\n\nvm2 through 3.12.0 (fixed in 3.12.1) does not correctly handle a nullish `this` receiver in the apply trap ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93603\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T16:07:30.978546Z"} 2026-09-18T16:07:30.978546+00:00 https://vulnerability.circl.lu/sighting/eea1bb19-8f34-4339-9355-24309132bb5a/export 2026-09-19T06:19:02.233698+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "eea1bb19-8f34-4339-9355-24309132bb5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93603", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsgypqkbn2e", "content": "\ud83d\udd34 CVE-2026-93603 - Critical (10)\n\nvm2 through 3.12.0 (fixed in 3.12.1) does not correctly handle a nullish `this` receiver in the a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93603/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T15:06:08.815643Z"} 2026-09-18T15:06:08.815643+00:00 https://vulnerability.circl.lu/sighting/3d346902-80e2-42fb-90ca-f0299693138f/export 2026-09-19T06:19:02.233888+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3d346902-80e2-42fb-90ca-f0299693138f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93603", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117292483452078658", "content": "RE: https://infosec.exchange/@cR0w/117287817060203283\nBut wait, there's more perfect 10s!\ud83e\udd73 https://www.cve.org/CVERecord?id=CVE-2026-93603\nhttps://www.cve.org/CVERecord?id=CVE-2026-93605\nhttps://www.cve.org/CVERecord?id=CVE-2026-93606", "creation_timestamp": "2026-09-18T14:21:04.705700Z"} 2026-09-18T14:21:04.705700+00:00