<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 23 Aug 2026 08:57:24 +0000</lastBuildDate>
    <item>
      <title>f19266ea-22e0-4057-af4a-80e03c9b8574</title>
      <link>https://vulnerability.circl.lu/sighting/f19266ea-22e0-4057-af4a-80e03c9b8574/export</link>
      <description>{"uuid": "f19266ea-22e0-4057-af4a-80e03c9b8574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62681", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtocsko7op2y", "content": "CVE-2026-62681\nIf you use the Orval tool to create JavaScript API clients and are on a version before 8.21.0, a specially crafted API path can insert malicious code into the generated request functions. When those functions\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T12:50:04.055537Z"}</description>
      <content:encoded>{"uuid": "f19266ea-22e0-4057-af4a-80e03c9b8574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62681", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtocsko7op2y", "content": "CVE-2026-62681\nIf you use the Orval tool to create JavaScript API clients and are on a version before 8.21.0, a specially crafted API path can insert malicious code into the generated request functions. When those functions\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T12:50:04.055537Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f19266ea-22e0-4057-af4a-80e03c9b8574/export</guid>
      <pubDate>Sat, 22 Aug 2026 12:50:04 +0000</pubDate>
    </item>
    <item>
      <title>5cc42617-8a6a-469c-a428-4ce5d2154f89</title>
      <link>https://vulnerability.circl.lu/sighting/5cc42617-8a6a-469c-a428-4ce5d2154f89/export</link>
      <description>{"uuid": "5cc42617-8a6a-469c-a428-4ce5d2154f89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62681", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mthxw36wcp23", "content": "Orval Turns Your Build Pipeline Into a Malicious Code Factory\nPANIC 74% | Lag 0.0h | CVE-2026-62681 affects Orval, where crafted OpenAPI input can inject malicious JavaScript into gener\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-20T00:19:11.888034Z"}</description>
      <content:encoded>{"uuid": "5cc42617-8a6a-469c-a428-4ce5d2154f89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62681", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mthxw36wcp23", "content": "Orval Turns Your Build Pipeline Into a Malicious Code Factory\nPANIC 74% | Lag 0.0h | CVE-2026-62681 affects Orval, where crafted OpenAPI input can inject malicious JavaScript into gener\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-20T00:19:11.888034Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5cc42617-8a6a-469c-a428-4ce5d2154f89/export</guid>
      <pubDate>Thu, 20 Aug 2026 00:19:11 +0000</pubDate>
    </item>
    <item>
      <title>c8682a42-8ac9-4747-9063-0cf468ab70a7</title>
      <link>https://vulnerability.circl.lu/sighting/c8682a42-8ac9-4747-9063-0cf468ab70a7/export</link>
      <description>{"uuid": "c8682a42-8ac9-4747-9063-0cf468ab70a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62681", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthwbzkmpm2u", "content": "CVE-2026-62681 - orval\nOrval, a tool for generating TypeScript clients, has a bug that allows attackers to inject malicious code into generated JavaScript. This could lead to code execution on the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#orval #orvallabs #CVE #infosec", "creation_timestamp": "2026-08-19T23:50:05.464655Z"}</description>
      <content:encoded>{"uuid": "c8682a42-8ac9-4747-9063-0cf468ab70a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62681", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthwbzkmpm2u", "content": "CVE-2026-62681 - orval\nOrval, a tool for generating TypeScript clients, has a bug that allows attackers to inject malicious code into generated JavaScript. This could lead to code execution on the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#orval #orvallabs #CVE #infosec", "creation_timestamp": "2026-08-19T23:50:05.464655Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c8682a42-8ac9-4747-9063-0cf468ab70a7/export</guid>
      <pubDate>Wed, 19 Aug 2026 23:50:05 +0000</pubDate>
    </item>
    <item>
      <title>27df384a-fd81-485e-b8e5-b0491f7712c7</title>
      <link>https://vulnerability.circl.lu/sighting/27df384a-fd81-485e-b8e5-b0491f7712c7/export</link>
      <description>{"uuid": "27df384a-fd81-485e-b8e5-b0491f7712c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62681", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthjy3k6bq2t", "content": "\ud83d\udea8 CVE-2026-62681 \u2014 CVSS 9.3 CRITICAL\n\nOrval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. P...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62681\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T20:09:46.710209Z"}</description>
      <content:encoded>{"uuid": "27df384a-fd81-485e-b8e5-b0491f7712c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62681", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthjy3k6bq2t", "content": "\ud83d\udea8 CVE-2026-62681 \u2014 CVSS 9.3 CRITICAL\n\nOrval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. P...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62681\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T20:09:46.710209Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/27df384a-fd81-485e-b8e5-b0491f7712c7/export</guid>
      <pubDate>Wed, 19 Aug 2026 20:09:46 +0000</pubDate>
    </item>
  </channel>
</rss>
