<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 29 Jun 2026 07:10:48 +0000</lastBuildDate>
    <item>
      <title>7d735a43-67a5-4fe0-babd-a018363bd642</title>
      <link>https://vulnerability.circl.lu/sighting/7d735a43-67a5-4fe0-babd-a018363bd642/export</link>
      <description>{"uuid": "7d735a43-67a5-4fe0-babd-a018363bd642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-P6P2-QQ95-VQ5H", "type": "seen", "source": "https://t.me/arpsyndicate/2380", "content": "#ExploitObserverAlert\n\nGHSA-p6p2-qq95-vq5h\n\nDESCRIPTION: Exploit Observer has 2 entries related to GHSA-P6P2-QQ95-VQ5H. The Fides webserver API allows custom integrations to be uploaded as a ZIP file. This ZIP file must contain YAML files, but Fides can be configured to also accept the inclusion of custom Python code in it. The custom code is executed in a restricted, sandboxed environment, but the sandbox can be bypassed to execute any arbitrary code.\n\nGHSS: 8.8", "creation_timestamp": "2024-01-03T23:17:40.000000Z"}</description>
      <content:encoded>{"uuid": "7d735a43-67a5-4fe0-babd-a018363bd642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-P6P2-QQ95-VQ5H", "type": "seen", "source": "https://t.me/arpsyndicate/2380", "content": "#ExploitObserverAlert\n\nGHSA-p6p2-qq95-vq5h\n\nDESCRIPTION: Exploit Observer has 2 entries related to GHSA-P6P2-QQ95-VQ5H. The Fides webserver API allows custom integrations to be uploaded as a ZIP file. This ZIP file must contain YAML files, but Fides can be configured to also accept the inclusion of custom Python code in it. The custom code is executed in a restricted, sandboxed environment, but the sandbox can be bypassed to execute any arbitrary code.\n\nGHSS: 8.8", "creation_timestamp": "2024-01-03T23:17:40.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7d735a43-67a5-4fe0-babd-a018363bd642/export</guid>
      <pubDate>Wed, 03 Jan 2024 23:17:40 +0000</pubDate>
    </item>
  </channel>
</rss>
