https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 23 Aug 2026 01:44:57 +0000 https://vulnerability.circl.lu/sighting/143e43cf-4f03-4ea4-afd1-1ebd97431b99/export {"uuid": "143e43cf-4f03-4ea4-afd1-1ebd97431b99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72717", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtodwd5oay2m", "content": "CVE-2026-72717\nIf you use Orval versions before 8.21.0 to create TypeScript clients, specially crafted default values in an API description can cause malicious JavaScript to run when the generated code is loaded. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T13:10:03.925714Z"} {"uuid": "143e43cf-4f03-4ea4-afd1-1ebd97431b99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72717", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtodwd5oay2m", "content": "CVE-2026-72717\nIf you use Orval versions before 8.21.0 to create TypeScript clients, specially crafted default values in an API description can cause malicious JavaScript to run when the generated code is loaded. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T13:10:03.925714Z"} https://vulnerability.circl.lu/sighting/143e43cf-4f03-4ea4-afd1-1ebd97431b99/export Sat, 22 Aug 2026 13:10:03 +0000 https://vulnerability.circl.lu/sighting/a072684c-bf13-4432-a954-4887584bc86e/export {"uuid": "a072684c-bf13-4432-a954-4887584bc86e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72717", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthz3f7jye2m", "content": "CVE-2026-72717 - orval\nA security risk exists in Orval's code generation for OpenAPI and Swagger specifications. If not updated to version 8.21.0 or later, malicious code can be executed when the generated\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#orval #orvallabs #CVE #infosec", "creation_timestamp": "2026-08-20T00:40:03.950833Z"} {"uuid": "a072684c-bf13-4432-a954-4887584bc86e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72717", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthz3f7jye2m", "content": "CVE-2026-72717 - orval\nA security risk exists in Orval's code generation for OpenAPI and Swagger specifications. If not updated to version 8.21.0 or later, malicious code can be executed when the generated\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#orval #orvallabs #CVE #infosec", "creation_timestamp": "2026-08-20T00:40:03.950833Z"} https://vulnerability.circl.lu/sighting/a072684c-bf13-4432-a954-4887584bc86e/export Thu, 20 Aug 2026 00:40:03 +0000 https://vulnerability.circl.lu/sighting/81adfc9d-e63a-49d8-aae5-77647c70c8ac/export {"uuid": "81adfc9d-e63a-49d8-aae5-77647c70c8ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72717", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthk33bcry2t", "content": "\ud83d\udea8 CVE-2026-72717 \u2014 CVSS 9.3 CRITICAL\n\nOrval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. P...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-72717\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T20:11:27.369298Z"} {"uuid": "81adfc9d-e63a-49d8-aae5-77647c70c8ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72717", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthk33bcry2t", "content": "\ud83d\udea8 CVE-2026-72717 \u2014 CVSS 9.3 CRITICAL\n\nOrval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. P...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-72717\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T20:11:27.369298Z"} https://vulnerability.circl.lu/sighting/81adfc9d-e63a-49d8-aae5-77647c70c8ac/export Wed, 19 Aug 2026 20:11:27 +0000 https://vulnerability.circl.lu/sighting/90b7b5b4-e126-40be-b66d-9636c53f1d36/export {"uuid": "90b7b5b4-e126-40be-b66d-9636c53f1d36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72717", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/d7lnttnkdepzd", "content": "CVE-2026-72717 - Orval: Import-time RCE via schema default -> zod module-level template literal\nCVE ID : CVE-2026-72717\n \n Published : Aug. 19, 2026, 6:17 p.m. | 13\u00a0minutes ago\n \n Description : Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swag...", "creation_timestamp": "2026-08-19T18:53:42.745508Z"} {"uuid": "90b7b5b4-e126-40be-b66d-9636c53f1d36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72717", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/d7lnttnkdepzd", "content": "CVE-2026-72717 - Orval: Import-time RCE via schema default -> zod module-level template literal\nCVE ID : CVE-2026-72717\n \n Published : Aug. 19, 2026, 6:17 p.m. | 13\u00a0minutes ago\n \n Description : Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swag...", "creation_timestamp": "2026-08-19T18:53:42.745508Z"} https://vulnerability.circl.lu/sighting/90b7b5b4-e126-40be-b66d-9636c53f1d36/export Wed, 19 Aug 2026 18:53:42 +0000