{"vulnerability": "cve-2026-4514", "sightings": [{"uuid": "7aef284b-05df-48a6-8a11-699459440c04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-45147", "type": "published-proof-of-concept", "source": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-6r88-8v7q-q4p2", "content": "", "creation_timestamp": "2026-05-08T02:49:57.000000Z"}, {"uuid": "82af0db9-4131-4d90-b311-403db42dfba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-45148", "type": "published-proof-of-concept", "source": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-fmh9-gpqh-g53g", "content": "", "creation_timestamp": "2026-05-08T03:05:45.000000Z"}, {"uuid": "b9b181e5-0853-441a-bdb5-c63ef59ab74d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45149", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmzlseijt522", "content": "CVE-2026-45149 - brace-expansion: Large numeric range defeats documented `max` DoS protection\nCVE ID : CVE-2026-45149\n \n Published : May 29, 2026, 8:16 p.m. | 16\u00a0minutes ago\n \n Description : The brace-expansion library generates arbitrary strings containing a common prefix and...", "creation_timestamp": "2026-05-29T22:33:56.303600Z"}, {"uuid": "6a4aa059-93a0-41af-9924-1ad79d9b91ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45149", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116663196876893976", "content": "Our CTI team identified a lot of activities targeting juliangruber brace-expansion (CVE-2026-45149) https://vuldb.com/vuln/367380/cti", "creation_timestamp": "2026-05-30T11:05:14.469233Z"}, {"uuid": "6e19156b-b59a-4780-84bd-22509220e76d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45149", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mn2yvczurc2u", "content": "\n\ud83d\udea8 New MEDIUM CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-45149 impacts brace-expansion in 3 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/542\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-05-30T12:00:54.015141Z"}, {"uuid": "58f92dd8-ea48-4a73-ae4f-dbeeca865477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45149", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mpbfy6ew2x2x", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-45149 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/542 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-06-27T12:01:30.475437Z"}, {"uuid": "85d0873b-2d9c-4b2f-b3b1-d563cff1562c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45140", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvqo4ssrrv2t", "content": "\ud83d\udea8 CVE-2026-45140 \u2014 CVSS 9.8 CRITICAL\n\nChamilo LMS is an open-source learning management system. Prior to 2.0.1, Chamilo LMS allows an unauthentic...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-45140\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T22:08:21.160038Z"}, {"uuid": "50d74659-1519-4f0d-8746-d6d9b1ab66f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45140", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvqytmpriu2t", "content": "CVE-2026-45140 - chamilo-lms\nThe file\u2011upload function in Chamilo LMS can be used by anyone on the internet to place and run programs on your server. This gives an attacker full control of the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#chamilolms #chamilo #composer #CVE #infosec", "creation_timestamp": "2026-09-18T01:20:04.630661Z"}, {"uuid": "25b65b68-887e-41b6-9670-a4bb998f7354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45143", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvqzfjkq3m2f", "content": "CVE-2026-45143 - chamilo-lms\nIn Chamilo LMS versions 2.0.0 through 2.1.0, private messages are saved without cleaning the content and are shown as HTML to the recipient. A student can send a specially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#chamilolms #chamilo #CVE #infosec", "creation_timestamp": "2026-09-18T01:30:05.241159Z"}, {"uuid": "da41ccf1-8cae-48b1-9fb1-d04d5d8e515c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45140", "type": "published-proof-of-concept", "source": "Telegram/jV3txT6ZcmjSGz1nh42SPt5Og_J4EJFXD4J2ds4Qym4297w", "content": "", "creation_timestamp": "2026-09-19T02:00:04.132587Z"}]}