{"vulnerability": "cve-2026-4742", "sightings": [{"uuid": "d73c9580-8a78-41f5-87bd-5c972ded7387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4742", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4742", "content": "", "creation_timestamp": "2026-03-24T03:17:30.000000Z"}, {"uuid": "ccb65112-df79-4ed6-bf58-1170de762898", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47428", "type": "published-proof-of-concept", "source": "https://github.com/vitest-dev/vitest/security/advisories/GHSA-2h32-95rg-cppp", "content": "", "creation_timestamp": "2026-05-19T09:23:47.000000Z"}, {"uuid": "e2c1abbd-97b9-4484-ba21-9e557b2923b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47429", "type": "published-proof-of-concept", "source": "https://github.com/vitest-dev/vitest/security/advisories/GHSA-5xrq-8626-4rwp", "content": "", "creation_timestamp": "2026-05-19T09:24:23.000000Z"}, {"uuid": "681db4a6-288f-4d85-a81a-53924c35ed65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47423", "type": "published-proof-of-concept", "source": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-87xg-pxx2-7hvx", "content": "", "creation_timestamp": "2026-05-19T09:26:54.000000Z"}, {"uuid": "45dd3e0a-9042-4b10-beca-e98745347aa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47423", "type": "seen", "source": "https://t.me/GithubRedTeam/87264", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-47423-dompurify-xss-detector\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Galaxy-sc\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Go\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-04 10:34:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-04T11:02:16.000000Z"}, {"uuid": "204828ac-eb7e-4791-aaec-a43350c0128b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47429", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mnqcloetts2r", "content": "JavaScript \u30c6\u30b9\u30c8\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af Vitest\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027(VE-2026-47428,CVE-2026-47429,CVE\u672a\u63a1\u756a)\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "creation_timestamp": "2026-06-07T23:20:25.452654Z"}, {"uuid": "ebe817be-4565-4655-8e97-6081715d3406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47428", "type": "seen", "source": "https://bsky.app/profile/whatsnew.fyi/post/3mtjg2f7rwx2t", "content": "Storybook v10.5.10\n\nBump Vitest to 4.1.6 (CVE-2026-47428)", "creation_timestamp": "2026-08-20T14:04:49.300875Z"}, {"uuid": "70ffff1a-3271-4119-9a47-48c9d5cfb966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47429", "type": "published-proof-of-concept", "source": "Telegram/cFkqaiLeMF7rcnyy-4alEvGOnwxzqn60V0GjpreyOt3-Yxw", "content": "", "creation_timestamp": "2026-06-09T11:00:07.000000Z"}, {"uuid": "c9fa1e0f-7970-4e57-a9f4-0d1e07e645a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47429", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mprkoe7q362x", "content": "CVE-2026-47429 - @rootio/vitest\nThe Root vitest package had a vulnerability that could allow an attacker to execute unauthorized code. This could have let a malicious user access or modify sensitive data.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rootio #Rootnpm #CVE #infosec", "creation_timestamp": "2026-07-03T22:08:04.921396Z"}, {"uuid": "72c5f73a-a4ec-4f2e-bfae-a7590814afd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47422", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdoqvsu4d2x", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47422 \u0432 Frappe: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/8800789A-C0EB-4BF9-AFBD-CA677E896BD5", "creation_timestamp": "2026-07-11T03:09:01.001165Z"}, {"uuid": "641e59ae-0df8-4a68-a91f-59396d419780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47429", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqmxjui5ty2t", "content": "CVE-2026-47429 - vitest\nIf you're using Vitest UI on Windows and exposing it to the network, or running it on Windows without proper security, an attacker could access and execute arbitrary files.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vitest #GitHubActions #npm #CVE #infosec", "creation_timestamp": "2026-07-14T19:40:05.831331Z"}, {"uuid": "d36e2be9-5539-421e-9b15-a779cd2bb4b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47428", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqotrh5lhp2u", "content": "CVE-2026-47428 - browser\nVitest's browser mode can execute malicious JavaScript if you visit a specially crafted URL. This could allow an attacker to steal your Vitest API token and use it to access your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#browser #vitest #npm #CVE #infosec", "creation_timestamp": "2026-07-15T13:38:04.946277Z"}, {"uuid": "bba324ae-91b2-444d-a90d-ef5a0a6386c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47423", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrabx7rhtk2s", "content": "\ud83d\udccc CVE-2026-47423 - DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. In 3.4.4, DOMPurify allowed selectedcontent by default, allowing bro... https://www.cyberhub.blog/cves/CVE-2026-47423", "creation_timestamp": "2026-07-22T12:07:06.366445Z"}, {"uuid": "35556ae8-5cd3-48ef-bb0e-2f7cbf1df87a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47427", "type": "published-proof-of-concept", "source": "https://github.com/github/github-mcp-server/security/advisories/GHSA-w4q6-qw23-4rg7", "content": "", "creation_timestamp": "2026-07-28T16:35:07.437931Z"}, {"uuid": "f7062535-9ca1-41b1-9f5c-fb78071624e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47427", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrqjw7fxsn2l", "content": "CVE-2026-47427 - Unauthenticated DoS in GitHub MCP Server before 1.1.0. Nil pointer dereference crashes server. CVSS 7.5. Update to 1.1.0 immediately. #CVE #GitHub #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-47427/", "creation_timestamp": "2026-07-28T23:12:18.337485Z"}]}