{"vulnerability": "CVE-2026-4397", "sightings": [{"uuid": "fa3a8410-6793-4233-935b-c15bb2dc6939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4397", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mhvchgeqhw23", "content": "", "creation_timestamp": "2026-03-25T14:30:08.555109Z"}, {"uuid": "642879b1-3fc5-466e-8ae2-3c967fd37662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43975", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ml5miikxog2j", "content": "CVE-2026-43975: Apache Wicket: Possible malicious path traversal in FolderUploadsFileManager", "creation_timestamp": "2026-05-06T02:06:34.493886Z"}, {"uuid": "7366cce8-a624-40ca-9ae0-ea5cb8aa57ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43979", "type": "published-proof-of-concept", "source": "https://github.com/LearningCircuit/local-deep-research/security/advisories/GHSA-fj2m-qvh9-jq4q", "content": "", "creation_timestamp": "2026-05-09T11:08:19.000000Z"}, {"uuid": "7a08b723-596f-4108-89ae-70bca749d5b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43978", "type": "published-proof-of-concept", "source": "https://github.com/wger-project/wger/security/advisories/GHSA-9qpr-vc49-hqg2", "content": "", "creation_timestamp": "2026-05-14T12:36:41.000000Z"}, {"uuid": "376a5491-647f-4f54-87b2-e6c1ef202c4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43977", "type": "published-proof-of-concept", "source": "https://github.com/wger-project/wger/security/advisories/GHSA-cj9g-27ph-4cgv", "content": "", "creation_timestamp": "2026-05-14T12:37:19.000000Z"}, {"uuid": "d4efead8-c2c9-4874-977a-20b261f4ca94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43973", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnrzby3lgt2r", "content": "CVE-2026-43973 - gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion\nCVE ID : CVE-2026-43973\n \n Published : June 8, 2026, 2:12 p.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : Uncontrolled Resource Consumption vulnerability in ninenines gun...", "creation_timestamp": "2026-06-08T15:39:13.236205Z"}, {"uuid": "34560fae-3815-42ca-83ae-29340ad281d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43974", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mns2fst52p2r", "content": "CVE-2026-43974 - gun HTTP/1.1 client accepts unsolicited 101 Switching Protocols response allowing server-driven protocol hijack and OOM\nCVE ID : CVE-2026-43974\n \n Published : June 8, 2026, 2:12 p.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : Unexpected Status Code or Return Val...", "creation_timestamp": "2026-06-08T15:59:15.030290Z"}, {"uuid": "fa34ba05-8176-452f-864f-b76ab36ea07a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43973", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mozyxzm7v72z", "content": "\ud83d\udd17 CVE : CVE-2026-43973, CVE-2026-53689, CVE-2026-43973, CVE-2026-53689", "creation_timestamp": "2026-06-24T13:20:08.309851Z"}, {"uuid": "8bf399eb-9749-496b-930a-224d20633b2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43975", "type": "seen", "source": "https://gist.github.com/hayageek/05ef86a8272d03ab9e54ab5476cf7afe", "content": "\n### CVE-2026-3455 - ✓\nhttps://github.com/advisories/GHSA-7gmj-h9xc-mcxc\nhttps://github.com/nodemailer/mailparser/issues/412\n\n\n###  CVE-2026-24888 - ✓\nhttps://github.com/microsoft/maker.js/security/advisories/GHSA-2cp6-34r9-54xx\n\n\n###  CVE-2026-25244 - ✓\nhttps://github.com/webdriverio/webdriverio/security/advisories/GHSA-5c46-x3qw-q7j7\n\n### CVE-2026-43975 - ✓\nhttps://github.com/advisories/GHSA-3gmf-p6r4-q8m6\n\n\n### CVE-2026-42563 - ✓\nhttps://github.com/jelmer/dulwich/security/advisories/GHSA-9277-mp7x-85jf", "creation_timestamp": "2026-08-11T09:43:37.383999Z"}, {"uuid": "69bff4a9-92b5-45ff-b029-4fcfa7b78ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43971", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dmld5r3twdcdn", "content": "CVE-2026-43971 - Link Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow_link:link/1\nCVE ID : CVE-2026-43971\n \n Published : Aug. 18, 2026, 9:17 a.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : Improper Encoding or Escaping of Output vulnerability in nineni...", "creation_timestamp": "2026-08-18T10:52:20.314450Z"}, {"uuid": "985161a9-968b-4398-8678-fa77ffc20efc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43978", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqsg2fmcbx2s", "content": "CVE-2026-43978 - wger: Privilege escalation via trainer-login session chaining allows gym trainers to impersonate gym managers\nCVE ID : CVE-2026-43978\n \n Published : July 16, 2026, 11:16 p.m. | 18\u00a0minutes ago\n \n Description : wger is a free, open-source workout and fitness man...", "creation_timestamp": "2026-07-16T23:43:11.701812Z"}, {"uuid": "075e49a3-f87d-494f-b14e-a845bdb0bfa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43977", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqsg5fikth2n", "content": "CVE-2026-43977 - wger IDOR: Authenticated Users Can Read Others' Private Workout Session Data via Template Routine API\nCVE ID : CVE-2026-43977\n \n Published : July 16, 2026, 11:16 p.m. | 18\u00a0minutes ago\n \n Description : wger is a free, open-source workout and fitness manager. In...", "creation_timestamp": "2026-07-16T23:44:52.305344Z"}]}