<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 25 Sep 2026 03:53:18 +0000</lastBuildDate>
    <item>
      <title>fa4cad40-8566-4eb6-8908-4a5d87a166f9</title>
      <link>https://vulnerability.circl.lu/sighting/fa4cad40-8566-4eb6-8908-4a5d87a166f9/export</link>
      <description>{"uuid": "fa4cad40-8566-4eb6-8908-4a5d87a166f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49213", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqemh2jf552m", "content": "\ud83d\udfe0 CVE-2026-49213 - High (8.1)\n\nTypeBot is a chatbot builder tool. Prior to 3.17.2, Typebot's shared SSRF validator in packages/l...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49213/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-11T12:00:23.066358Z"}</description>
      <content:encoded>{"uuid": "fa4cad40-8566-4eb6-8908-4a5d87a166f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49213", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqemh2jf552m", "content": "\ud83d\udfe0 CVE-2026-49213 - High (8.1)\n\nTypeBot is a chatbot builder tool. Prior to 3.17.2, Typebot's shared SSRF validator in packages/l...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49213/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-11T12:00:23.066358Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/fa4cad40-8566-4eb6-8908-4a5d87a166f9/export</guid>
      <pubDate>Sat, 11 Jul 2026 12:00:23 +0000</pubDate>
    </item>
    <item>
      <title>7595b434-8e08-4179-a7ae-29ddc450b868</title>
      <link>https://vulnerability.circl.lu/sighting/7595b434-8e08-4179-a7ae-29ddc450b868/export</link>
      <description>{"uuid": "7595b434-8e08-4179-a7ae-29ddc450b868", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49214", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnzgowdf7j24", "content": "CVE-2026-49214 - guzzlehttp/psr7 has CRLF Injection via URI Host Component\nCVE ID : CVE-2026-49214\n \n Published : June 11, 2026, 12:38 p.m. | 41\u00a0minutes ago\n \n Description : guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Versions prior to 2.10.2 did not...", "creation_timestamp": "2026-06-11T14:27:43.786926Z"}</description>
      <content:encoded>{"uuid": "7595b434-8e08-4179-a7ae-29ddc450b868", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49214", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnzgowdf7j24", "content": "CVE-2026-49214 - guzzlehttp/psr7 has CRLF Injection via URI Host Component\nCVE ID : CVE-2026-49214\n \n Published : June 11, 2026, 12:38 p.m. | 41\u00a0minutes ago\n \n Description : guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Versions prior to 2.10.2 did not...", "creation_timestamp": "2026-06-11T14:27:43.786926Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7595b434-8e08-4179-a7ae-29ddc450b868/export</guid>
      <pubDate>Thu, 11 Jun 2026 14:27:43 +0000</pubDate>
    </item>
    <item>
      <title>0547c5b4-c79d-418a-86b1-f39a201489b6</title>
      <link>https://vulnerability.circl.lu/sighting/0547c5b4-c79d-418a-86b1-f39a201489b6/export</link>
      <description>{"uuid": "0547c5b4-c79d-418a-86b1-f39a201489b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49218", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mny5i4wo5u2v", "content": "CVE-2026-49218 - ImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensions\nCVE ID : CVE-2026-49218\n \n Published : June 10, 2026, 11:16 p.m. | 2\u00a0hours, 1\u00a0minute ago\n \n Description : ImageMagick is free and open-source software used for editing and ...", "creation_timestamp": "2026-06-11T02:10:12.483746Z"}</description>
      <content:encoded>{"uuid": "0547c5b4-c79d-418a-86b1-f39a201489b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49218", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mny5i4wo5u2v", "content": "CVE-2026-49218 - ImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensions\nCVE ID : CVE-2026-49218\n \n Published : June 10, 2026, 11:16 p.m. | 2\u00a0hours, 1\u00a0minute ago\n \n Description : ImageMagick is free and open-source software used for editing and ...", "creation_timestamp": "2026-06-11T02:10:12.483746Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0547c5b4-c79d-418a-86b1-f39a201489b6/export</guid>
      <pubDate>Thu, 11 Jun 2026 02:10:12 +0000</pubDate>
    </item>
    <item>
      <title>556ebfbd-3120-4f9d-83ed-6af5a39a20ff</title>
      <link>https://vulnerability.circl.lu/sighting/556ebfbd-3120-4f9d-83ed-6af5a39a20ff/export</link>
      <description>{"uuid": "556ebfbd-3120-4f9d-83ed-6af5a39a20ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49218", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnxzkh72te2n", "content": "\ud83d\udfe0 CVE-2026-49218 - High (7.5)\n\nImageMagick is free and open-source software used for editing and manipulating digital images. Pr...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49218/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-11T00:59:56.400622Z"}</description>
      <content:encoded>{"uuid": "556ebfbd-3120-4f9d-83ed-6af5a39a20ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49218", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnxzkh72te2n", "content": "\ud83d\udfe0 CVE-2026-49218 - High (7.5)\n\nImageMagick is free and open-source software used for editing and manipulating digital images. Pr...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49218/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-11T00:59:56.400622Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/556ebfbd-3120-4f9d-83ed-6af5a39a20ff/export</guid>
      <pubDate>Thu, 11 Jun 2026 00:59:56 +0000</pubDate>
    </item>
    <item>
      <title>0c33abad-0282-40df-a5a5-8254abb8e0fd</title>
      <link>https://vulnerability.circl.lu/sighting/0c33abad-0282-40df-a5a5-8254abb8e0fd/export</link>
      <description>{"uuid": "0c33abad-0282-40df-a5a5-8254abb8e0fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-49212", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmxzgyz6x62f", "content": "\ud83d\udd10 CVE-2026-49212: LiveComponentHydrator HMAC checksum lacks component and slot binding\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-49212-livecomponenthydrator-hmac-checksum-lacks-component-and-slot-binding", "creation_timestamp": "2026-05-29T07:32:47.930943Z"}</description>
      <content:encoded>{"uuid": "0c33abad-0282-40df-a5a5-8254abb8e0fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-49212", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmxzgyz6x62f", "content": "\ud83d\udd10 CVE-2026-49212: LiveComponentHydrator HMAC checksum lacks component and slot binding\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-49212-livecomponenthydrator-hmac-checksum-lacks-component-and-slot-binding", "creation_timestamp": "2026-05-29T07:32:47.930943Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0c33abad-0282-40df-a5a5-8254abb8e0fd/export</guid>
      <pubDate>Fri, 29 May 2026 07:32:47 +0000</pubDate>
    </item>
    <item>
      <title>ef760df0-d3dd-4a03-8d89-acfd10df3cb7</title>
      <link>https://vulnerability.circl.lu/sighting/ef760df0-d3dd-4a03-8d89-acfd10df3cb7/export</link>
      <description>{"uuid": "ef760df0-d3dd-4a03-8d89-acfd10df3cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-49216", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmxzgupjrn2c", "content": "\ud83d\udd10 CVE-2026-49216: XSS in symfony/ux-autocomplete via unescaped AJAX response data\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-49216-xss-in-symfony-ux-autocomplete-via-unescaped-ajax-response-data", "creation_timestamp": "2026-05-29T07:32:44.112670Z"}</description>
      <content:encoded>{"uuid": "ef760df0-d3dd-4a03-8d89-acfd10df3cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-49216", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmxzgupjrn2c", "content": "\ud83d\udd10 CVE-2026-49216: XSS in symfony/ux-autocomplete via unescaped AJAX response data\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-49216-xss-in-symfony-ux-autocomplete-via-unescaped-ajax-response-data", "creation_timestamp": "2026-05-29T07:32:44.112670Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ef760df0-d3dd-4a03-8d89-acfd10df3cb7/export</guid>
      <pubDate>Fri, 29 May 2026 07:32:44 +0000</pubDate>
    </item>
    <item>
      <title>48ffc934-4d6e-429e-9dcc-4b1544348fcd</title>
      <link>https://vulnerability.circl.lu/sighting/48ffc934-4d6e-429e-9dcc-4b1544348fcd/export</link>
      <description>{"uuid": "48ffc934-4d6e-429e-9dcc-4b1544348fcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-49215", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmxzgqhaiq2p", "content": "\ud83d\udd10 CVE-2026-49215: CSRF Protection Bypass in symfony/ux-live-component: Accept Header is CORS-Safelisted\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-49215-csrf-protection-bypass-in-symfony-ux-live-component-accept-header-is-cors-safelisted", "creation_timestamp": "2026-05-29T07:32:39.122356Z"}</description>
      <content:encoded>{"uuid": "48ffc934-4d6e-429e-9dcc-4b1544348fcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-49215", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmxzgqhaiq2p", "content": "\ud83d\udd10 CVE-2026-49215: CSRF Protection Bypass in symfony/ux-live-component: Accept Header is CORS-Safelisted\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-49215-csrf-protection-bypass-in-symfony-ux-live-component-accept-header-is-cors-safelisted", "creation_timestamp": "2026-05-29T07:32:39.122356Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/48ffc934-4d6e-429e-9dcc-4b1544348fcd/export</guid>
      <pubDate>Fri, 29 May 2026 07:32:39 +0000</pubDate>
    </item>
    <item>
      <title>6b4bb9dc-a075-4ba5-9959-4a5ef08940b0</title>
      <link>https://vulnerability.circl.lu/sighting/6b4bb9dc-a075-4ba5-9959-4a5ef08940b0/export</link>
      <description>{"uuid": "6b4bb9dc-a075-4ba5-9959-4a5ef08940b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-49211", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmxzgmdwar2x", "content": "\ud83d\udd10 CVE-2026-49211: Information exposure via unescaped LIKE wildcards in EntitySearchUtil\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-49211-information-exposure-via-unescaped-like-wildcards-in-entitysearchutil", "creation_timestamp": "2026-05-29T07:32:34.756063Z"}</description>
      <content:encoded>{"uuid": "6b4bb9dc-a075-4ba5-9959-4a5ef08940b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-49211", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmxzgmdwar2x", "content": "\ud83d\udd10 CVE-2026-49211: Information exposure via unescaped LIKE wildcards in EntitySearchUtil\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-49211-information-exposure-via-unescaped-like-wildcards-in-entitysearchutil", "creation_timestamp": "2026-05-29T07:32:34.756063Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6b4bb9dc-a075-4ba5-9959-4a5ef08940b0/export</guid>
      <pubDate>Fri, 29 May 2026 07:32:34 +0000</pubDate>
    </item>
    <item>
      <title>f4376174-7790-4477-a2ab-8742e0e07be5</title>
      <link>https://vulnerability.circl.lu/sighting/f4376174-7790-4477-a2ab-8742e0e07be5/export</link>
      <description>{"uuid": "f4376174-7790-4477-a2ab-8742e0e07be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-49210", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmxzghhkd52e", "content": "\ud83d\udd10 CVE-2026-49210: XSS in symfony/ux-live-component via attacker-controlled child component tag\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-49210-xss-in-symfony-ux-live-component-via-attacker-controlled-child-component-tag", "creation_timestamp": "2026-05-29T07:32:30.007115Z"}</description>
      <content:encoded>{"uuid": "f4376174-7790-4477-a2ab-8742e0e07be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-49210", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmxzghhkd52e", "content": "\ud83d\udd10 CVE-2026-49210: XSS in symfony/ux-live-component via attacker-controlled child component tag\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-49210-xss-in-symfony-ux-live-component-via-attacker-controlled-child-component-tag", "creation_timestamp": "2026-05-29T07:32:30.007115Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f4376174-7790-4477-a2ab-8742e0e07be5/export</guid>
      <pubDate>Fri, 29 May 2026 07:32:30 +0000</pubDate>
    </item>
  </channel>
</rss>
