{"vulnerability": "cve-2026-5019", "sightings": [{"uuid": "1d8f2285-cf4f-41b2-be4d-781fc71fbb96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5019", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mi5tqe2i6u2s", "content": "", "creation_timestamp": "2026-03-29T00:00:40.427396Z"}, {"uuid": "541debec-5fbd-4942-9544-916ff415047f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5019", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mi5tyngws42s", "content": "", "creation_timestamp": "2026-03-29T00:05:18.031124Z"}, {"uuid": "30eb6ae8-73e0-465b-b2ab-5561e285ba03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5019", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3minif5q4um2q", "content": "", "creation_timestamp": "2026-04-04T05:20:08.337333Z"}, {"uuid": "fa31238b-5e6f-45bc-8664-c71375577ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5019", "type": "published-proof-of-concept", "source": "Telegram/2ZCZ0X-U_suKs7wtR6ZGpeXrnXUtKYHoBRWUbFIBTrMUhlY", "content": "", "creation_timestamp": "2026-03-29T01:15:46.000000Z"}, {"uuid": "125c6075-809f-411a-802d-893822ce6202", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50196", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3molwuneim227", "content": "CVE-2026-50196 - Insecure Deserialization in Steeltoe. CVSS 7.5. Leads to DoS via unhandled exception in Eureka cache refresh. No patch yet. Monitor and apply workarounds. #CVE #Steeltoe #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-50196/", "creation_timestamp": "2026-06-18T23:05:10.802659Z"}, {"uuid": "8d42508b-7283-4fe1-88ce-7323694951bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50195", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mom72udh7u25", "content": "[containerd] Patch releases addressing CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, and CVE-2026-47262", "creation_timestamp": "2026-06-19T01:31:49.293270Z"}, {"uuid": "8dcd6160-07fd-4b57-bb31-dd807fd43f50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50195", "type": "seen", "source": "https://bsky.app/profile/canartuc.com/post/3momyrcpuo42y", "content": "containerd patched five CRI-plugin CVEs at once across 2.3.2, 2.2.5, 2.1.9, 2.0.10 and 1.7.33, all reported by AWS. CVE-2026-50195 poisons an image tag through checkpoint import. Have you audited which restore paths your clusters actually allow?\n\n#containers", "creation_timestamp": "2026-06-19T09:11:46.135556Z"}, {"uuid": "5436a69a-9607-4fa4-9b3e-7b31abe291a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50195", "type": "seen", "source": "https://bsky.app/profile/canartuc.com/post/3mon3ocbcmd2e", "content": "containerd patched 1.7 through 2.3 in one coordinated drop, so managed Kubernetes everywhere now has five CVEs to clear. The riskiest, CVE-2026-50195, abuses checkpoint restore. Who owns runtime patching on your team, platform or security?\n\n#kubernetes", "creation_timestamp": "2026-06-19T10:03:46.866108Z"}, {"uuid": "126ce7b4-26f3-4228-b5c9-cf67ad733f6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50195", "type": "seen", "source": "https://bsky.app/profile/mfahlandt.bsky.social/post/3mouxgsffum2z", "content": "\u26a0\ufe0f Strimzi Kafka Operator 1.0.1 removes older CRD API support.\n- Strimzi 1.0.1: Drops v1beta2, v1beta1, v1alpha1 CRD APIs.\n- containerd: Fixes CVE-2026-50195, CVE-2026-53488.\n- Prometheus v3.5.4: Addresses GHSA-39j6-789q-qxvh.\nFull breakdown:\n\nhttps://lwcn.dev/newsletter/2026-week-26/", "creation_timestamp": "2026-06-22T13:09:18.170382Z"}, {"uuid": "795222fe-6a87-44bd-a3ff-ea50a79d1612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50193", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moylsm4iin2j", "content": "CVE-2026-50193 - jackson-databind: Deeply nested JsonNode throws StackOverflowError for toString()\nCVE ID : CVE-2026-50193\n \n Published : June 23, 2026, 9 p.m. | 2\u00a0hours, 44\u00a0minutes ago\n \n Description : jackson-databind contains the general-purpose data-binding functionality a...", "creation_timestamp": "2026-06-23T23:51:47.707622Z"}, {"uuid": "e936b35b-8f52-4678-ad9e-573da720081a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50191", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtfgggmq6p24", "content": "\ud83d\udfe0 CVE-2026-50191 - High (8.8)\n\n4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards is vulner...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-50191/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-19T00:00:54.467118Z"}, {"uuid": "4cacd0ff-5646-4e7a-94b1-2dd14a249e18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50195", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpmcfgiidz2n", "content": "CVE-2026-50195 - containerd: CRI checkpoint import allows local image tag poisoning\nCVE ID : CVE-2026-50195\n \n Published : July 1, 2026, 5:50 p.m. | 1\u00a0hour, 55\u00a0minutes ago\n \n Description : containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9...", "creation_timestamp": "2026-07-01T19:56:36.762120Z"}, {"uuid": "262d0e00-4466-45bd-af69-cdf52aee763e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50195", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnrdvo57o2r", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-50195 \u0432 containerd: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E66AD8CF-0848-455D-B80A-BC109FCDCCEF", "creation_timestamp": "2026-07-02T09:56:51.887272Z"}, {"uuid": "459e042e-87f9-4f1f-9603-d66d89bef544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50192", "type": "published-proof-of-concept", "source": "https://github.com/kerberos-io/agent/security/advisories/GHSA-h5gx-45rj-2h5j", "content": "", "creation_timestamp": "2026-07-02T18:35:11.962994Z"}, {"uuid": "cc3c07c8-4baf-49c3-983a-2e3a111b490c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50195", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqnbsbitx2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-50195 \u0432 containerd: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/8E9CE98C-107D-42A8-8620-1F65211A98CD", "creation_timestamp": "2026-07-03T13:22:04.807939Z"}, {"uuid": "fc272ba0-4680-46d2-beb2-12ff24b7c576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50190", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtkbpy4m5r2u", "content": "CVE-2026-50190 - shaarli\nA security issue affects shaarli (Debian). The advisory does not describe the issue in detail. Check the linked advisory for the fixed version and details.\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#shaarli #debian #Debian12 #CVE #infosec", "creation_timestamp": "2026-08-20T22:20:04.615152Z"}, {"uuid": "6fa27222-d3a7-487b-8edf-469782f5cc5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50197", "type": "published-proof-of-concept", "source": "https://github.com/zalando/skipper/security/advisories/GHSA-659f-rgp5-w4wf", "content": "", "creation_timestamp": "2026-07-08T22:35:12.658103Z"}, {"uuid": "2a9a7c39-eb58-4eb5-b12a-bf563addc14f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50197", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mrdww77afc2f", "content": "\ud83d\udea8 EUVD-2026-48437\n\ud83d\udcca 8.8/10\n\n\ud83d\udcdd Skipper contains an incomplete fix for CVE-2026-50197 in which oversized request bodies bypass Open Policy Agent (OPA) deny-on-presence Rego policies. When a reques...\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-48437\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-07-23T23:00:19.845910Z"}, {"uuid": "0e5bc49b-5e58-4b90-b33f-d5e9175490f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50197", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdwwwinuc2e", "content": "\ud83d\udfe0 CVE-2026-65604 - High (8.2)\n\nSkipper contains an incomplete fix for CVE-2026-50197 in which oversized request bodies bypass Op...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-65604/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-23T23:00:45.331436Z"}]}