<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 29 Jun 2026 10:39:16 +0000</lastBuildDate>
    <item>
      <title>f6e55310-109e-4d54-bfbd-852c85897a61</title>
      <link>https://vulnerability.circl.lu/sighting/f6e55310-109e-4d54-bfbd-852c85897a61/export</link>
      <description>{"uuid": "f6e55310-109e-4d54-bfbd-852c85897a61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-26139", "type": "seen", "source": "https://t.me/cibsecurity/67496", "content": "\u203c CVE-2023-26139 \u203c\n\nVersions of the package underscore-keypath from 0.0.11 are vulnerable to Prototype Pollution via the name argument of the setProperty() function. Exploiting this vulnerability is possible due to improper input sanitization which allows the usage of arguments like \u00e2\u20ac\u0153__proto__\u00e2\u20ac\ufffd.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-01T12:38:15.000000Z"}</description>
      <content:encoded>{"uuid": "f6e55310-109e-4d54-bfbd-852c85897a61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-26139", "type": "seen", "source": "https://t.me/cibsecurity/67496", "content": "\u203c CVE-2023-26139 \u203c\n\nVersions of the package underscore-keypath from 0.0.11 are vulnerable to Prototype Pollution via the name argument of the setProperty() function. Exploiting this vulnerability is possible due to improper input sanitization which allows the usage of arguments like \u00e2\u20ac\u0153__proto__\u00e2\u20ac\ufffd.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-01T12:38:15.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f6e55310-109e-4d54-bfbd-852c85897a61/export</guid>
      <pubDate>Tue, 01 Aug 2023 12:38:15 +0000</pubDate>
    </item>
  </channel>
</rss>
