<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 22 Aug 2026 14:26:53 +0000</lastBuildDate>
    <item>
      <title>cca2a9c2-8ed1-4a1b-ac41-0c47d09fdaeb</title>
      <link>https://vulnerability.circl.lu/sighting/cca2a9c2-8ed1-4a1b-ac41-0c47d09fdaeb/export</link>
      <description>{"uuid": "cca2a9c2-8ed1-4a1b-ac41-0c47d09fdaeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71865", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtodehz5so2c", "content": "CVE-2026-71865\nIf you use Orval versions before 8.21.0 to generate client code, a specially crafted query parameter name can cause malicious JavaScript to run when the generated files are loaded. This can affect developers,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T13:00:04.509000Z"}</description>
      <content:encoded>{"uuid": "cca2a9c2-8ed1-4a1b-ac41-0c47d09fdaeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71865", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtodehz5so2c", "content": "CVE-2026-71865\nIf you use Orval versions before 8.21.0 to generate client code, a specially crafted query parameter name can cause malicious JavaScript to run when the generated files are loaded. This can affect developers,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T13:00:04.509000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cca2a9c2-8ed1-4a1b-ac41-0c47d09fdaeb/export</guid>
      <pubDate>Sat, 22 Aug 2026 13:00:04 +0000</pubDate>
    </item>
    <item>
      <title>78e49fab-2fcf-4371-b343-e3dd7a0e0a89</title>
      <link>https://vulnerability.circl.lu/sighting/78e49fab-2fcf-4371-b343-e3dd7a0e0a89/export</link>
      <description>{"uuid": "78e49fab-2fcf-4371-b343-e3dd7a0e0a89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71865", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthxfqpygz23", "content": "CVE-2026-71865 - orval\nA security issue in Orval allows attackers to inject malicious JavaScript code when using certain query parameters. This can lead to code execution in the developer, CI, or application\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#orval #orvallabs #CVE #infosec", "creation_timestamp": "2026-08-20T00:10:04.882965Z"}</description>
      <content:encoded>{"uuid": "78e49fab-2fcf-4371-b343-e3dd7a0e0a89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71865", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthxfqpygz23", "content": "CVE-2026-71865 - orval\nA security issue in Orval allows attackers to inject malicious JavaScript code when using certain query parameters. This can lead to code execution in the developer, CI, or application\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#orval #orvallabs #CVE #infosec", "creation_timestamp": "2026-08-20T00:10:04.882965Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/78e49fab-2fcf-4371-b343-e3dd7a0e0a89/export</guid>
      <pubDate>Thu, 20 Aug 2026 00:10:04 +0000</pubDate>
    </item>
    <item>
      <title>762ab0be-b533-41ee-8cd9-304667ec7996</title>
      <link>https://vulnerability.circl.lu/sighting/762ab0be-b533-41ee-8cd9-304667ec7996/export</link>
      <description>{"uuid": "762ab0be-b533-41ee-8cd9-304667ec7996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71865", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthjz7ezrk25", "content": "\ud83d\udea8 CVE-2026-71865 \u2014 CVSS 9.3 CRITICAL\n\nOrval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. P...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-71865\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T20:10:24.459888Z"}</description>
      <content:encoded>{"uuid": "762ab0be-b533-41ee-8cd9-304667ec7996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71865", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthjz7ezrk25", "content": "\ud83d\udea8 CVE-2026-71865 \u2014 CVSS 9.3 CRITICAL\n\nOrval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. P...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-71865\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T20:10:24.459888Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/762ab0be-b533-41ee-8cd9-304667ec7996/export</guid>
      <pubDate>Wed, 19 Aug 2026 20:10:24 +0000</pubDate>
    </item>
  </channel>
</rss>
