<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 05 Sep 2026 03:41:45 +0000</lastBuildDate>
    <item>
      <title>c82121d5-1e7b-4df8-b3ee-745e34ccd6ff</title>
      <link>https://vulnerability.circl.lu/sighting/c82121d5-1e7b-4df8-b3ee-745e34ccd6ff/export</link>
      <description>{"uuid": "c82121d5-1e7b-4df8-b3ee-745e34ccd6ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82854", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mueqv7t6m22f", "content": "Nodemailer \u306b SMTP\u30b3\u30de\u30f3\u30c9\u6ce8\u5165\u306e\u8106\u5f31\u6027\uff08CVE-2026-82854\uff09\u3002\n\n\u8a55\u4fa1\u306f\u958b\u767a\u5143\u304c CVSS 2.3 LOW\u3001NVD\u63b2\u8f09\u306e\u5024\u306f 9.8 CRITICAL \u3068\u5272\u308c\u3066\u3044\u307e\u3059\u3002\u65e2\u5b9a\u306eenvelope\u306b\u306f size \u304c\u542b\u307e\u308c\u306a\u3044\u305f\u3081\u3001\u591a\u304f\u306e\u30a2\u30d7\u30ea\u306f\u5f71\u97ff\u3092\u53d7\u3051\u307e\u305b\u3093\u3002\n\n\u5bfe\u51e6: sendMail \u306b size \u4ed8\u304d\u306e envelope \u3092\u6e21\u3057\u3066\u3044\u308b\u304b\u78ba\u8a8d\u3057\u30018.0.4\u4ee5\u964d\u3078\u66f4\u65b0\u3057\u3066\u304f\u3060\u3055\u3044\u3002\n\nforsmile.jp/articles/nod...", "creation_timestamp": "2026-08-31T11:00:39.108027Z"}</description>
      <content:encoded>{"uuid": "c82121d5-1e7b-4df8-b3ee-745e34ccd6ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82854", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mueqv7t6m22f", "content": "Nodemailer \u306b SMTP\u30b3\u30de\u30f3\u30c9\u6ce8\u5165\u306e\u8106\u5f31\u6027\uff08CVE-2026-82854\uff09\u3002\n\n\u8a55\u4fa1\u306f\u958b\u767a\u5143\u304c CVSS 2.3 LOW\u3001NVD\u63b2\u8f09\u306e\u5024\u306f 9.8 CRITICAL \u3068\u5272\u308c\u3066\u3044\u307e\u3059\u3002\u65e2\u5b9a\u306eenvelope\u306b\u306f size \u304c\u542b\u307e\u308c\u306a\u3044\u305f\u3081\u3001\u591a\u304f\u306e\u30a2\u30d7\u30ea\u306f\u5f71\u97ff\u3092\u53d7\u3051\u307e\u305b\u3093\u3002\n\n\u5bfe\u51e6: sendMail \u306b size \u4ed8\u304d\u306e envelope \u3092\u6e21\u3057\u3066\u3044\u308b\u304b\u78ba\u8a8d\u3057\u30018.0.4\u4ee5\u964d\u3078\u66f4\u65b0\u3057\u3066\u304f\u3060\u3055\u3044\u3002\n\nforsmile.jp/articles/nod...", "creation_timestamp": "2026-08-31T11:00:39.108027Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c82121d5-1e7b-4df8-b3ee-745e34ccd6ff/export</guid>
      <pubDate>Mon, 31 Aug 2026 11:00:39 +0000</pubDate>
    </item>
    <item>
      <title>7847242f-f12a-495a-b867-ed3997d7b0f7</title>
      <link>https://vulnerability.circl.lu/sighting/7847242f-f12a-495a-b867-ed3997d7b0f7/export</link>
      <description>{"uuid": "7847242f-f12a-495a-b867-ed3997d7b0f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82854", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenvxe2542b", "content": "\ud83d\udea8 CVE-2026-82854 \u2014 CVSS 9.3 CRITICAL\n\nNodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.size param...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82854\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:07:22.704574Z"}</description>
      <content:encoded>{"uuid": "7847242f-f12a-495a-b867-ed3997d7b0f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82854", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenvxe2542b", "content": "\ud83d\udea8 CVE-2026-82854 \u2014 CVSS 9.3 CRITICAL\n\nNodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.size param...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82854\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:07:22.704574Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7847242f-f12a-495a-b867-ed3997d7b0f7/export</guid>
      <pubDate>Mon, 31 Aug 2026 10:07:22 +0000</pubDate>
    </item>
    <item>
      <title>b052afc6-abb0-4c29-bed7-6924c0ff1a9b</title>
      <link>https://vulnerability.circl.lu/sighting/b052afc6-abb0-4c29-bed7-6924c0ff1a9b/export</link>
      <description>{"uuid": "b052afc6-abb0-4c29-bed7-6924c0ff1a9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82854", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muemf4tokp2y", "content": "CVE-2026-82854 - nodemailer\nIf your system uses Nodemailer versions older than 8.0.4 and lets users influence the email envelope size, an attacker can embed line\u2011break characters that cause extra mail commands to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nodemailer #CVE #infosec", "creation_timestamp": "2026-08-31T09:40:04.187809Z"}</description>
      <content:encoded>{"uuid": "b052afc6-abb0-4c29-bed7-6924c0ff1a9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82854", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muemf4tokp2y", "content": "CVE-2026-82854 - nodemailer\nIf your system uses Nodemailer versions older than 8.0.4 and lets users influence the email envelope size, an attacker can embed line\u2011break characters that cause extra mail commands to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nodemailer #CVE #infosec", "creation_timestamp": "2026-08-31T09:40:04.187809Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b052afc6-abb0-4c29-bed7-6924c0ff1a9b/export</guid>
      <pubDate>Mon, 31 Aug 2026 09:40:04 +0000</pubDate>
    </item>
  </channel>
</rss>
