<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 25 Sep 2026 17:14:28 +0000</lastBuildDate>
    <item>
      <title>d8a7ebdc-55d5-4ac6-a5f2-d7f8b1e90560</title>
      <link>https://vulnerability.circl.lu/sighting/d8a7ebdc-55d5-4ac6-a5f2-d7f8b1e90560/export</link>
      <description>{"uuid": "d8a7ebdc-55d5-4ac6-a5f2-d7f8b1e90560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96755", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw7ytr7wkn2i", "content": "CVE-2026-96755 - orval\nThe @orval/effect part of orval (versions 8.14.0 to 8.28.1) can execute malicious JavaScript that an attacker embeds in an API description. This happens when the tool turns certain\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#orval #orvallabs #CVE #infosec", "creation_timestamp": "2026-09-24T00:30:05.758287Z"}</description>
      <content:encoded>{"uuid": "d8a7ebdc-55d5-4ac6-a5f2-d7f8b1e90560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96755", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw7ytr7wkn2i", "content": "CVE-2026-96755 - orval\nThe @orval/effect part of orval (versions 8.14.0 to 8.28.1) can execute malicious JavaScript that an attacker embeds in an API description. This happens when the tool turns certain\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#orval #orvallabs #CVE #infosec", "creation_timestamp": "2026-09-24T00:30:05.758287Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d8a7ebdc-55d5-4ac6-a5f2-d7f8b1e90560/export</guid>
      <pubDate>Thu, 24 Sep 2026 00:30:05 +0000</pubDate>
    </item>
    <item>
      <title>b4b8d273-bbb4-4184-ae32-70b9cd8e953a</title>
      <link>https://vulnerability.circl.lu/sighting/b4b8d273-bbb4-4184-ae32-70b9cd8e953a/export</link>
      <description>{"uuid": "b4b8d273-bbb4-4184-ae32-70b9cd8e953a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96755", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw7djtmobm2l", "content": "\ud83d\udea8 CVE-2026-96755 \u2014 CVSS 9.3 CRITICAL\n\norval versions 8.14.0 through 8.28.1 contain a code injection vulnerability in the @orval/effect generator ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-96755\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-23T18:08:43.577458Z"}</description>
      <content:encoded>{"uuid": "b4b8d273-bbb4-4184-ae32-70b9cd8e953a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96755", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw7djtmobm2l", "content": "\ud83d\udea8 CVE-2026-96755 \u2014 CVSS 9.3 CRITICAL\n\norval versions 8.14.0 through 8.28.1 contain a code injection vulnerability in the @orval/effect generator ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-96755\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-23T18:08:43.577458Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b4b8d273-bbb4-4184-ae32-70b9cd8e953a/export</guid>
      <pubDate>Wed, 23 Sep 2026 18:08:43 +0000</pubDate>
    </item>
  </channel>
</rss>
