<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 06 Jun 2026 00:45:08 +0000</lastBuildDate>
    <item>
      <title>92842ac6-a91b-4ba3-a1d4-3959b1cd5004</title>
      <link>https://vulnerability.circl.lu/sighting/92842ac6-a91b-4ba3-a1d4-3959b1cd5004/export</link>
      <description>{"uuid": "92842ac6-a91b-4ba3-a1d4-3959b1cd5004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4213", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhmah5rlyp2i", "content": "", "creation_timestamp": "2026-03-22T00:00:14.368552Z"}</description>
      <content:encoded>{"uuid": "92842ac6-a91b-4ba3-a1d4-3959b1cd5004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4213", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhmah5rlyp2i", "content": "", "creation_timestamp": "2026-03-22T00:00:14.368552Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/92842ac6-a91b-4ba3-a1d4-3959b1cd5004/export</guid>
      <pubDate>Sun, 22 Mar 2026 00:00:14 +0000</pubDate>
    </item>
    <item>
      <title>db1cfb0d-c65c-47b6-af2f-dc470c328eb6</title>
      <link>https://vulnerability.circl.lu/sighting/db1cfb0d-c65c-47b6-af2f-dc470c328eb6/export</link>
      <description>{"uuid": "db1cfb0d-c65c-47b6-af2f-dc470c328eb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42138", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml2csqi3qc2q", "content": "CVE-2026-42138 - Dify Vulnerable to Stored XSS via SVG-file upload\nCVE ID : CVE-2026-42138\n \n Published : May 4, 2026, 5:34 p.m. | 46\u00a0minutes ago\n \n Description : Dify is an open-source LLM app development platform. Prior to version 1.13.1, using the method POST /api/files/upl...", "creation_timestamp": "2026-05-04T18:35:21.531028Z"}</description>
      <content:encoded>{"uuid": "db1cfb0d-c65c-47b6-af2f-dc470c328eb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42138", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml2csqi3qc2q", "content": "CVE-2026-42138 - Dify Vulnerable to Stored XSS via SVG-file upload\nCVE ID : CVE-2026-42138\n \n Published : May 4, 2026, 5:34 p.m. | 46\u00a0minutes ago\n \n Description : Dify is an open-source LLM app development platform. Prior to version 1.13.1, using the method POST /api/files/upl...", "creation_timestamp": "2026-05-04T18:35:21.531028Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/db1cfb0d-c65c-47b6-af2f-dc470c328eb6/export</guid>
      <pubDate>Mon, 04 May 2026 18:35:21 +0000</pubDate>
    </item>
    <item>
      <title>76064b63-f7b6-4f63-ad63-f31c5aa21db4</title>
      <link>https://vulnerability.circl.lu/sighting/76064b63-f7b6-4f63-ad63-f31c5aa21db4/export</link>
      <description>{"uuid": "76064b63-f7b6-4f63-ad63-f31c5aa21db4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42137", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlfi3awge42k", "content": "CVE-2026-42137 - Kirby: `pages.access/list` and `files.access/list` permissions are not consistently checked in the REST API and changes dialog\nCVE ID : CVE-2026-42137\n \n Published : May 9, 2026, 3:38 a.m. | 47\u00a0minutes ago\n \n Description : Kirby is an open-source content manag...", "creation_timestamp": "2026-05-09T05:08:53.264587Z"}</description>
      <content:encoded>{"uuid": "76064b63-f7b6-4f63-ad63-f31c5aa21db4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42137", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlfi3awge42k", "content": "CVE-2026-42137 - Kirby: `pages.access/list` and `files.access/list` permissions are not consistently checked in the REST API and changes dialog\nCVE ID : CVE-2026-42137\n \n Published : May 9, 2026, 3:38 a.m. | 47\u00a0minutes ago\n \n Description : Kirby is an open-source content manag...", "creation_timestamp": "2026-05-09T05:08:53.264587Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/76064b63-f7b6-4f63-ad63-f31c5aa21db4/export</guid>
      <pubDate>Sat, 09 May 2026 05:08:53 +0000</pubDate>
    </item>
  </channel>
</rss>
