{"vulnerability": "CVE-2026-9375", "sightings": [{"uuid": "b2022dc3-1e56-4b2e-acfc-cfd57a237d9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9375", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3moqy56mrki2s", "content": "CVE-2026-9375 - DoS in Urllib3. Decompression bomb bypass in streaming API with Brotli. CVSS 7.5. No patch available yet. Monitor for updates. #CVE #infosec #python\n\nhttps://www.valtersit.com/cve/CVE-2026-9375/", "creation_timestamp": "2026-06-20T23:11:09.776610Z"}, {"uuid": "414fb32a-3f9c-4d44-b95d-3677f5cc52c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93758", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsquki7mn24", "content": "\ud83d\udfe0 CVE-2026-93758 - High (8.1)\n\nAn insecure direct object reference in the nested attributes handling of the Mongoid object-docum...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93758/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T18:02:45.973124Z"}, {"uuid": "e670a8bb-23c0-4948-a10c-4e2a349db5e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93758", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7keyvefpsou7k", "content": "CVE-2026-93758 - Cross-principal document update, theft, and deletion via unvalidated id in nested attributes\nCVE ID : CVE-2026-93758\n \n Published : Sept. 18, 2026, 5:17 p.m. | 23\u00a0minutes ago\n \n Description : An insecure direct object reference in the nested attributes handlin...", "creation_timestamp": "2026-09-18T18:09:31.527218Z"}, {"uuid": "b9ff53b2-7f87-474f-b02d-b3faf7a40fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93759", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3pqoilxumkk4q", "content": "CVE-2026-93759 - Server-side JavaScript injection via string query criteria bypassing the strict operator allowlist\nCVE ID : CVE-2026-93759\n \n Published : Sept. 18, 2026, 6:18 p.m. | 21\u00a0minutes ago\n \n Description : Mongoid does not neutralize a string-typed query criterion sup...", "creation_timestamp": "2026-09-18T18:57:31.755574Z"}, {"uuid": "f94691c4-50f1-4a9f-817c-51d1a5ef5fd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93753", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7fbnbb2gmpxdb", "content": "CVE-2026-93753 - deepmerge through 4.3.1 Prototype Poisoning via mergeObject\nCVE ID : CVE-2026-93753\n \n Published : Sept. 18, 2026, 6:18 p.m. | 21\u00a0minutes ago\n \n Description : deepmerge through 4.3.1 contains a prototype poisoning vulnerability in the mergeObject() function th...", "creation_timestamp": "2026-09-18T19:03:32.257305Z"}, {"uuid": "dca50ab8-914d-4f79-877e-bf4e382e948d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93752", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4hhey276adide", "content": "CVE-2026-93752 - CSSOM through 0.5.0 Denial of Service via length Property\nCVE ID : CVE-2026-93752\n \n Published : Sept. 18, 2026, 6:18 p.m. | 21\u00a0minutes ago\n \n Description : CSSOM through 0.5.0 contains a denial of service vulnerability in CSSStyleDeclaration.setProperty() tha...", "creation_timestamp": "2026-09-18T19:09:31.683179Z"}, {"uuid": "42a587fc-42ca-4e1d-a00d-25ced9f1c9fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93752", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsxj2fxyh2e", "content": "\ud83d\udfe0 CVE-2026-93752 - High (7.5)\n\nCSSOM through 0.5.0 contains a denial of service vulnerability in CSSStyleDeclaration.setProperty...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93752/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T20:01:36.250136Z"}, {"uuid": "5364513d-6cf6-4679-9c2a-a21777da5e3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93753", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsxjbtb2e22", "content": "\ud83d\udfe0 CVE-2026-93753 - High (7.5)\n\ndeepmerge through 4.3.1 contains a prototype poisoning vulnerability in the mergeObject() functio...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93753/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T20:01:44.482852Z"}, {"uuid": "9cec2ea5-68fb-4f53-a97e-c34e15c50f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93759", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsxkmverv2z", "content": "\ud83d\udfe0 CVE-2026-93759 - High (8.6)\n\nMongoid does not neutralize a string-typed query criterion supplied to its query builder, and ins...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93759/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T20:02:29.011817Z"}]}