<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 14 Sep 2026 10:07:03 +0000</lastBuildDate>
    <item>
      <title>a70e8fc9-a79e-43c9-9744-fcada13cb2f3</title>
      <link>https://vulnerability.circl.lu/sighting/a70e8fc9-a79e-43c9-9744-fcada13cb2f3/export</link>
      <description>{"uuid": "a70e8fc9-a79e-43c9-9744-fcada13cb2f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85061", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mv2icuikav2l", "content": "A critical MapLibre XSS vulnerability allows zero-click code execution in 2.7M weekly downloads. Discover how CVE-2026-85061 works and how to patch now.\n\n#MapLibre #XSS #CVE202685061 #WebSecurity #InfoSec #CyberSecurity #OpenSource", "creation_timestamp": "2026-09-09T02:25:48.347084Z"}</description>
      <content:encoded>{"uuid": "a70e8fc9-a79e-43c9-9744-fcada13cb2f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85061", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mv2icuikav2l", "content": "A critical MapLibre XSS vulnerability allows zero-click code execution in 2.7M weekly downloads. Discover how CVE-2026-85061 works and how to patch now.\n\n#MapLibre #XSS #CVE202685061 #WebSecurity #InfoSec #CyberSecurity #OpenSource", "creation_timestamp": "2026-09-09T02:25:48.347084Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a70e8fc9-a79e-43c9-9744-fcada13cb2f3/export</guid>
      <pubDate>Wed, 09 Sep 2026 02:25:48 +0000</pubDate>
    </item>
    <item>
      <title>333f7ef1-d487-40e1-a793-595688f0e257</title>
      <link>https://vulnerability.circl.lu/sighting/333f7ef1-d487-40e1-a793-595688f0e257/export</link>
      <description>{"uuid": "333f7ef1-d487-40e1-a793-595688f0e257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85061", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3muogt2znwk2y", "content": "\u3010\u7dca\u6025\u3011MapLibre GL JS \u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff08CVE-2026-85061 / CVSS 10.0\uff09\n\n\u7121\u5bb3\u5316\u3057\u3066\u3044\u308b\u306f\u305a\u306e\u30b5\u30cb\u30bf\u30a4\u30ba\u51e6\u7406\u304c\u3001\u96a3\u308a\u5408\u3046\u5371\u967a\u306a\u5c5e\u6027\u30921\u3064\u98db\u3070\u3057\u3066\u901a\u3057\u3066\u3057\u307e\u3044\u307e\u3059\u3002\u5730\u56f3\u306e\u5e30\u5c5e\u8868\u793a\u3092\u63cf\u753b\u3057\u305f\u6642\u70b9\u3067\u30b9\u30af\u30ea\u30d7\u30c8\u304c\u52d5\u304d\u3001\u30af\u30ea\u30c3\u30af\u306a\u3069\u306e\u8ffd\u52a0\u64cd\u4f5c\u306f\u8981\u308a\u307e\u305b\u3093\u3002\n\n\u5bfe\u51e6: npm \u306e maplibre-gl \u3092 6.4.1 \u4ee5\u964d\u3078\u66f4\u65b0\u3057\u3066\u304f\u3060\u3055\u3044\uff08\u6700\u65b0\u306f 6.7.0\uff09\u3002\n\nforsmile.jp/articles/map...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #CVE", "creation_timestamp": "2026-09-04T07:27:07.206178Z"}</description>
      <content:encoded>{"uuid": "333f7ef1-d487-40e1-a793-595688f0e257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85061", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3muogt2znwk2y", "content": "\u3010\u7dca\u6025\u3011MapLibre GL JS \u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff08CVE-2026-85061 / CVSS 10.0\uff09\n\n\u7121\u5bb3\u5316\u3057\u3066\u3044\u308b\u306f\u305a\u306e\u30b5\u30cb\u30bf\u30a4\u30ba\u51e6\u7406\u304c\u3001\u96a3\u308a\u5408\u3046\u5371\u967a\u306a\u5c5e\u6027\u30921\u3064\u98db\u3070\u3057\u3066\u901a\u3057\u3066\u3057\u307e\u3044\u307e\u3059\u3002\u5730\u56f3\u306e\u5e30\u5c5e\u8868\u793a\u3092\u63cf\u753b\u3057\u305f\u6642\u70b9\u3067\u30b9\u30af\u30ea\u30d7\u30c8\u304c\u52d5\u304d\u3001\u30af\u30ea\u30c3\u30af\u306a\u3069\u306e\u8ffd\u52a0\u64cd\u4f5c\u306f\u8981\u308a\u307e\u305b\u3093\u3002\n\n\u5bfe\u51e6: npm \u306e maplibre-gl \u3092 6.4.1 \u4ee5\u964d\u3078\u66f4\u65b0\u3057\u3066\u304f\u3060\u3055\u3044\uff08\u6700\u65b0\u306f 6.7.0\uff09\u3002\n\nforsmile.jp/articles/map...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #CVE", "creation_timestamp": "2026-09-04T07:27:07.206178Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/333f7ef1-d487-40e1-a793-595688f0e257/export</guid>
      <pubDate>Fri, 04 Sep 2026 07:27:07 +0000</pubDate>
    </item>
    <item>
      <title>30273488-dcbd-4c20-abb9-8df8cebde01e</title>
      <link>https://vulnerability.circl.lu/sighting/30273488-dcbd-4c20-abb9-8df8cebde01e/export</link>
      <description>{"uuid": "30273488-dcbd-4c20-abb9-8df8cebde01e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85061", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3munhm3g2gz2g", "content": "\ud83d\udea8 CVE-2026-85061 \u2014 CVSS 10 CRITICAL\n\nMapLibre GL JS is an interactive vector tile map library for web browsers. Prior to 6.4.1, DOM.sanitize() i...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85061\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-03T22:08:51.359589Z"}</description>
      <content:encoded>{"uuid": "30273488-dcbd-4c20-abb9-8df8cebde01e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85061", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3munhm3g2gz2g", "content": "\ud83d\udea8 CVE-2026-85061 \u2014 CVSS 10 CRITICAL\n\nMapLibre GL JS is an interactive vector tile map library for web browsers. Prior to 6.4.1, DOM.sanitize() i...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85061\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-03T22:08:51.359589Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/30273488-dcbd-4c20-abb9-8df8cebde01e/export</guid>
      <pubDate>Thu, 03 Sep 2026 22:08:51 +0000</pubDate>
    </item>
    <item>
      <title>f4936d93-0865-444c-b9e4-ca6ac54f42ba</title>
      <link>https://vulnerability.circl.lu/sighting/f4936d93-0865-444c-b9e4-ca6ac54f42ba/export</link>
      <description>{"uuid": "f4936d93-0865-444c-b9e4-ca6ac54f42ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85061", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mundrvolze2g", "content": "CVE-2026-85061 - maplibre-gl-js\nThe interactive map library MapLibre GL JS (versions before 6.4.1) can fail to remove dangerous HTML attributes when processing custom attribution text. An attacker who supplies\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#maplibre #CVE #infosec", "creation_timestamp": "2026-09-03T21:00:07.398565Z"}</description>
      <content:encoded>{"uuid": "f4936d93-0865-444c-b9e4-ca6ac54f42ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85061", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mundrvolze2g", "content": "CVE-2026-85061 - maplibre-gl-js\nThe interactive map library MapLibre GL JS (versions before 6.4.1) can fail to remove dangerous HTML attributes when processing custom attribution text. An attacker who supplies\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#maplibre #CVE #infosec", "creation_timestamp": "2026-09-03T21:00:07.398565Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f4936d93-0865-444c-b9e4-ca6ac54f42ba/export</guid>
      <pubDate>Thu, 03 Sep 2026 21:00:07 +0000</pubDate>
    </item>
  </channel>
</rss>
