<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 24 Sep 2026 07:01:02 +0000</lastBuildDate>
    <item>
      <title>5114d01c-a151-42d1-a793-a457c75cd180</title>
      <link>https://vulnerability.circl.lu/sighting/5114d01c-a151-42d1-a793-a457c75cd180/export</link>
      <description>{"uuid": "5114d01c-a151-42d1-a793-a457c75cd180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96758", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw7ybumpsz2r", "content": "CVE-2026-96758 - orval\nThe orval core library (versions before 8.28.0) can be tricked into executing unwanted code when it builds multipart form data. This happens if an attacker places special placeholders\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#orval #orvallabs #CVE #infosec", "creation_timestamp": "2026-09-24T00:20:04.754807Z"}</description>
      <content:encoded>{"uuid": "5114d01c-a151-42d1-a793-a457c75cd180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96758", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw7ybumpsz2r", "content": "CVE-2026-96758 - orval\nThe orval core library (versions before 8.28.0) can be tricked into executing unwanted code when it builds multipart form data. This happens if an attacker places special placeholders\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#orval #orvallabs #CVE #infosec", "creation_timestamp": "2026-09-24T00:20:04.754807Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5114d01c-a151-42d1-a793-a457c75cd180/export</guid>
      <pubDate>Thu, 24 Sep 2026 00:20:04 +0000</pubDate>
    </item>
    <item>
      <title>40fcbc0e-cfbb-469f-ba7e-5f2b7ec0d06c</title>
      <link>https://vulnerability.circl.lu/sighting/40fcbc0e-cfbb-469f-ba7e-5f2b7ec0d06c/export</link>
      <description>{"uuid": "40fcbc0e-cfbb-469f-ba7e-5f2b7ec0d06c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96758", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mw7kceq6zo2z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-96758: orval @orval/core before 8.28.0 contains a code injection vulnerability in the form-data serializer that fails to escape multipart property name\u2026\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-96758\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-23T20:09:49.345414Z"}</description>
      <content:encoded>{"uuid": "40fcbc0e-cfbb-469f-ba7e-5f2b7ec0d06c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96758", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mw7kceq6zo2z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-96758: orval @orval/core before 8.28.0 contains a code injection vulnerability in the form-data serializer that fails to escape multipart property name\u2026\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-96758\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-23T20:09:49.345414Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/40fcbc0e-cfbb-469f-ba7e-5f2b7ec0d06c/export</guid>
      <pubDate>Wed, 23 Sep 2026 20:09:49 +0000</pubDate>
    </item>
    <item>
      <title>c801e3c0-a23e-4078-af55-fcd20d4e448c</title>
      <link>https://vulnerability.circl.lu/sighting/c801e3c0-a23e-4078-af55-fcd20d4e448c/export</link>
      <description>{"uuid": "c801e3c0-a23e-4078-af55-fcd20d4e448c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96758", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jwmg5ah2sjzpg", "content": "CVE-2026-96758 - orval @orval/core before 8.28.0 Code Injection via Form-Data\nCVE ID : CVE-2026-96758\n \n Published : Sept. 23, 2026, 5:17 p.m. | 43\u00a0minutes ago\n \n Description : orval @orval/core before 8.28.0 contains a code injection vulnerability in the form-data serializer ...", "creation_timestamp": "2026-09-23T18:51:55.198914Z"}</description>
      <content:encoded>{"uuid": "c801e3c0-a23e-4078-af55-fcd20d4e448c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96758", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jwmg5ah2sjzpg", "content": "CVE-2026-96758 - orval @orval/core before 8.28.0 Code Injection via Form-Data\nCVE ID : CVE-2026-96758\n \n Published : Sept. 23, 2026, 5:17 p.m. | 43\u00a0minutes ago\n \n Description : orval @orval/core before 8.28.0 contains a code injection vulnerability in the form-data serializer ...", "creation_timestamp": "2026-09-23T18:51:55.198914Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c801e3c0-a23e-4078-af55-fcd20d4e448c/export</guid>
      <pubDate>Wed, 23 Sep 2026 18:51:55 +0000</pubDate>
    </item>
    <item>
      <title>1c3b5910-14a6-41a4-a035-49b2e8075dd5</title>
      <link>https://vulnerability.circl.lu/sighting/1c3b5910-14a6-41a4-a035-49b2e8075dd5/export</link>
      <description>{"uuid": "1c3b5910-14a6-41a4-a035-49b2e8075dd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96758", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw7dknokk62r", "content": "\ud83d\udea8 CVE-2026-96758 \u2014 CVSS 9.3 CRITICAL\n\norval @orval/core before 8.28.0 contains a code injection vulnerability in the form-data serializer that fa...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-96758\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-23T18:09:10.638483Z"}</description>
      <content:encoded>{"uuid": "1c3b5910-14a6-41a4-a035-49b2e8075dd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96758", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw7dknokk62r", "content": "\ud83d\udea8 CVE-2026-96758 \u2014 CVSS 9.3 CRITICAL\n\norval @orval/core before 8.28.0 contains a code injection vulnerability in the form-data serializer that fa...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-96758\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-23T18:09:10.638483Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1c3b5910-14a6-41a4-a035-49b2e8075dd5/export</guid>
      <pubDate>Wed, 23 Sep 2026 18:09:10 +0000</pubDate>
    </item>
  </channel>
</rss>
