{"vulnerability": "cve-2026-7155", "sightings": [{"uuid": "3f4ff18f-6a3b-42cd-b48c-70f6c3220cf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7155", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116479390119769333", "content": "", "creation_timestamp": "2026-04-28T00:00:45.775950Z"}, {"uuid": "82bfff05-6a7a-4f2e-b35a-0095bd0f757f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7155", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mkjbq6b5vx2o", "content": "", "creation_timestamp": "2026-04-28T00:00:47.161389Z"}, {"uuid": "aa0ab6e2-e7ea-497a-b1df-3e5ae4be459c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7155", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjfpffbah2k", "content": "", "creation_timestamp": "2026-04-28T01:11:55.524394Z"}, {"uuid": "9502bc8a-6a94-4b63-a89a-c873fa286e98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71558", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msjb2dlrwh2r", "content": "CVE-2026-71558 - apache fory\nApache Fory's C++ deserialization feature is affected by a security flaw. If exploited, this could cause your server to crash or allow attackers to take control of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachefory #apachefoundation #CVE #infosec", "creation_timestamp": "2026-08-07T19:10:14.127269Z"}, {"uuid": "ad394231-ec00-4486-8ddb-5190b36f7322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71554", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97084", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a poc-h2-CVE-2026-71554\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SunandM\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-07 21:19:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-71554 - h2 duplicate Host header request smuggling primitive (fixed in 4.4.1)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-08T00:02:15.288832Z"}, {"uuid": "7ec4df2d-c78c-47ba-b9cb-9fa7d9b88a1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71557", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97106", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-71557-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Saku0512\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-08 01:52:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-08T03:02:14.418651Z"}, {"uuid": "20a17efb-d9da-4f45-84e9-a7c9d46ecc7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71557", "type": "seen", "source": "https://gist.github.com/alon710/71d0ff9c71dc1f5ee8e40bba3da46014", "content": "# CVE-2026-71557: CVE-2026-71557: Path Traversal and Configuration Overwrite in go-git Filesystem Storage Engine\n\n> **CVSS Score:** 6.3\n> **Published:** 2026-08-07\n> **Full Report:** https://cvereports.com/reports/CVE-2026-71557\n\n## Summary\nCVE-2026-71557 is a path traversal vulnerability in go-git, a pure-Go implementation of Git. In vulnerable versions, the filesystem-backed storage engine fails to validate reference names before mapping them to on-disk paths. An attacker hosting a malicious Git server can advertise references containing directory traversal sequences, such as 'refs/heads/../../config', to write or overwrite files outside the intended reference storage directory.\n\n## TL;DR\nA path traversal flaw in go-git's reference processing allows a malicious remote server to overwrite local repository configuration files (such as .git/config) during clone or fetch operations, potentially leading to arbitrary command execution.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 6.3 (Medium)\n- **Exploit Status**: Proof-of-Concept (PoC)\n- **Impact**: High Integrity (I:H), Low Availability (A:L), Remote Code Execution (RCE)\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Applications utilizing github.com/go-git/go-git/v5 prior to v5.19.2 with filesystem-backed storage engines\n- Applications utilizing github.com/go-git/go-git/v6 from v6.0.0-alpha.1 to v6.0.0-alpha.4 with filesystem-backed storage engines\n\n## Mitigation\n\n- Upgrade the go-git library to the latest safe release branch.\n- Migrate the repository storage implementation from filesystem-backed storage to in-memory storage.\n- Enforce network perimeter access controls to prevent interactions with untrusted or public third-party Git hosting platforms.\n\n**Remediation Steps:**\n1. Update your Go project dependencies to pull go-git v5.19.2 or v6.0.0-alpha.5.\n2. Verify the dependency resolution change in the go.mod and go.sum files.\n3. Audit internal tools that perform clone or fetch operations, modifying the configuration to leverage storage/memory where appropriate.\n\n## References\n\n- [GitHub Security Advisory GHSA-qgq7-7hm3-q39j](https://github.com/go-git/go-git/security/advisories/GHSA-qgq7-7hm3-q39j)\n- [Public Proof of Concept Repository](https://github.com/Saku0512/CVE-2026-71557-poc)\n- [go-git Pull Request #2247](https://github.com/go-git/go-git/pull/2247)\n- [go-git Pull Request #2254](https://github.com/go-git/go-git/pull/2254)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-71557) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-08T10:39:06.928392Z"}, {"uuid": "03f5eeb7-9c42-4bc4-9d00-77a57ec9d9af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71556", "type": "seen", "source": "https://gist.github.com/alon710/96191d79926d3727c699122d4f73553a", "content": "# CVE-2026-71556: CVE-2026-71556: Symbolic Link Directory Traversal in go-git\n\n> **CVSS Score:** 7.1\n> **Published:** 2026-08-07\n> **Full Report:** https://cvereports.com/reports/CVE-2026-71556\n\n## Summary\nA symbolic link directory traversal vulnerability was identified in go-git, a pure Go implementation of the Git specification. This vulnerability allows an attacker to construct a repository that, when checked out or processed, bypasses directory boundaries to write or overwrite arbitrary files on the host filesystem.\n\n## TL;DR\nA path traversal vulnerability in go-git allows malicious repositories to overwrite files outside the worktree via crafted symbolic links, potentially leading to remote code execution.\n\n## Technical Details\n\n- **CWE ID**: CWE-59\n- **Attack Vector**: Network\n- **CVSS Score**: 7.1 (High)\n- **Exploit Status**: None / Poc Conceptual\n- **CISA KEV Status**: Not Listed\n- **Primary Weakness**: Improper Link Resolution Before File Access\n\n## Affected Systems\n\n- Applications using go-git\n- CI/CD pipelines relying on programmatic git cloning\n- Developer tools using go-git integrations\n- **go-git**: < 5.19.2 (Fixed in: `5.19.2`)\n- **go-git**: >= 6.0.0-alpha.1, < 6.0.0-alpha.5 (Fixed in: `6.0.0-alpha.5`)\n\n## Mitigation\n\n- Upgrade the go-git library dependency to patched versions.\n- Deploy applications in isolated containers or ephemeral sandboxes.\n- Perform static analysis validation on go modules in continuous integration pipelines.\n\n**Remediation Steps:**\n1. Analyze current project dependencies using `govulncheck` or similar static scanners.\n2. Update dependency file (go.mod) to require `github.com/go-git/go-git/v5` version 5.19.2 or higher.\n3. Recompile and deploy downstream binaries containing the updated library.\n4. Sanitize or restrict the input sources of remote repository clones if they cannot be fully trusted.\n\n## References\n\n- [GitHub Security Advisory GHSA-hc8v-wwc9-vgxm](https://github.com/go-git/go-git/security/advisories/GHSA-hc8v-wwc9-vgxm)\n- [NVD - CVE-2026-71556](https://nvd.nist.gov/vuln/detail/CVE-2026-71556)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-71556) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-08T11:33:31.384946Z"}, {"uuid": "bf2372dc-ca8a-4175-9363-e4e3f3899eed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71554", "type": "published-proof-of-concept", "source": "Telegram/wFizrrbAMDFnDVCm6fOMsyo-M7GcVmnQt0S9VRUliYzF6W4", "content": "", "creation_timestamp": "2026-08-08T23:04:23.238769Z"}, {"uuid": "7a69f22b-f24f-4c6d-bfde-e1eb90ae25ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71554", "type": "published-proof-of-concept", "source": "Telegram/SJgsYpMApmH3kxQGJCGNQpcz-GAta1cAcJiXzXwEzvRKjsI", "content": "", "creation_timestamp": "2026-08-08T23:06:33.386725Z"}, {"uuid": "106221a7-e1a7-4548-b86b-c8ca4800df8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71557", "type": "published-proof-of-concept", "source": "Telegram/HtR3voKuUb4Szlun3fBzuT2ivqN8DL7Kwlo1E3tEtAzGF3w", "content": "", "creation_timestamp": "2026-08-09T00:29:23.938394Z"}, {"uuid": "17b8be92-a4f9-4f16-83d7-a40a51626db8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71557", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97106", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-71557-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Saku0512\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-08 01:52:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-09T00:53:16.564376Z"}, {"uuid": "9b4bd60d-e070-4e82-af0f-24827f4e133d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71554", "type": "published-proof-of-concept", "source": "Telegram/wFizrrbAMDFnDVCm6fOMsyo-M7GcVmnQt0S9VRUliYzF6W4", "content": "", "creation_timestamp": "2026-08-09T01:13:05.486219Z"}, {"uuid": "22c08f94-3845-472f-8323-cf184950b966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71554", "type": "published-proof-of-concept", "source": "Telegram/SJgsYpMApmH3kxQGJCGNQpcz-GAta1cAcJiXzXwEzvRKjsI", "content": "", "creation_timestamp": "2026-08-09T01:13:05.606637Z"}, {"uuid": "8d375c81-271d-4a73-8621-34dba1a17cf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71551", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtevnmwbix2b", "content": "\ud83d\udfe0 CVE-2026-71551 - High (7.8)\n\nSuper Productivity is an advanced todo list app with integrated timeboxing and time tracking capa...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-71551/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-18T19:00:42.848229Z"}, {"uuid": "620fd6be-d9be-4d4a-9646-be544b31aa3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71553", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtclgvkfbx2a", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-71553](https://github.com/apostrophecms/apostrophe/commit/5a3746aaed49761e171c2cbfe7932...\nhttps://github.com/apostrophecms/apostrophe/commit/5a3746aaed49761e171c2cbfe793267c959829fd #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-08-17T20:52:39.142098Z"}, {"uuid": "a0bbf0c4-c205-4dbd-bf57-3b9819e65386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71554", "type": "seen", "source": "https://gist.github.com/alon710/91251538851544e4ecb69dd2c9aa7a2b", "content": "# CVE-2026-71554: CVE-2026-71554: HTTP Request Smuggling via Duplicate Host Headers in h2 Protocol Stack\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-08-06\n> **Full Report:** https://cvereports.com/reports/CVE-2026-71554\n\n## Summary\nA protocol-parsing vulnerability in the pure-Python HTTP/2 library 'h2' (versions <= 4.4.0) allows unauthenticated remote attackers to perform HTTP Request Smuggling (CWE-444). The vulnerability exists because the library does not validate the uniqueness of 'Host' headers in incoming HTTP/2 request streams. When an upstream gateway parses such requests and downgrades them to HTTP/1.1 for internal backend servers, the resulting stream contains duplicate Host headers, which leads to parsing inconsistency and potential bypass of security filters.\n\n## TL;DR\nThe 'h2' Python library fails to reject HTTP/2 streams containing multiple 'Host' headers. If an intermediary proxy downgrades these streams to HTTP/1.1, the duplicate headers are forwarded, triggering HTTP Request Smuggling.\n\n## Technical Details\n\n- **CWE ID**: CWE-444\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 5.3 (Medium)\n- **Impact**: Low Integrity & Availability (Potential HTTP Request Smuggling)\n- **Exploit Status**: none (Theoretical / No public PoCs available)\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Python environments utilizing the h2 (python-hyper) library version <= 4.4.0\n- ASGI web servers and Python reverse proxies performing HTTP/2 to HTTP/1.1 translation\n- **h2**: < 4.4.1 (Fixed in: `4.4.1`)\n\n## Mitigation\n\n- Upgrade the 'h2' library to version 4.4.1 or later immediately.\n- Filter out incoming requests at the outer perimeter proxy (e.g., Cloudflare, AWS ALB, NGINX) that contain multiple Host headers before they reach Python-based backend proxies.\n- Ensure backend web servers or downstream parsers strictly reject any incoming HTTP/1.1 requests containing duplicate Host headers with a 400 Bad Request error code, adhering to RFC 9112 Section 3.2.\n\n**Remediation Steps:**\n1. Run 'pip install --upgrade h2' or update project lockfiles (Poetry, Pipenv) to specify 'h2>=4.4.1'.\n2. Verify the installed version of 'h2' by executing: python -c \"import h2; print(h2.__version__)\"\n3. Restart ASGI servers and Python-based proxies to load the patched dependency code into memory.\n4. Audit downstream systems to confirm that they properly reject requests containing duplicate HTTP/1.1 Host headers.\n\n## References\n\n- [NVD Record for CVE-2026-71554](https://nvd.nist.gov/vuln/detail/CVE-2026-71554)\n- [GitHub Security Advisory GHSA-6hr6-w5qg-qmwg](https://github.com/python-hyper/h2/security/advisories/GHSA-6hr6-w5qg-qmwg)\n- [Vulnerability Fix Commit](https://github.com/python-hyper/h2/commit/292a40829feefda98c8509dcdbbb4a57af9bd6a6)\n- [Python-Hyper h2 Repository](https://github.com/python-hyper/h2)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-71554) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-06T23:32:34.198265Z"}, {"uuid": "9685803f-b79f-4a79-86fa-f588d4a412e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71554", "type": "seen", "source": "https://gist.github.com/alon710/91251538851544e4ecb69dd2c9aa7a2b", "content": "# CVE-2026-71554: CVE-2026-71554: HTTP Request Smuggling via Duplicate Host Headers in h2 Protocol Stack\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-08-06\n> **Full Report:** https://cvereports.com/reports/CVE-2026-71554\n\n## Summary\nA protocol-parsing vulnerability in the pure-Python HTTP/2 library 'h2' (versions <= 4.4.0) allows unauthenticated remote attackers to perform HTTP Request Smuggling (CWE-444). The vulnerability exists because the library does not validate the uniqueness of 'Host' headers in incoming HTTP/2 request streams. When an upstream gateway parses such requests and downgrades them to HTTP/1.1 for internal backend servers, the resulting stream contains duplicate Host headers, which leads to parsing inconsistency and potential bypass of security filters.\n\n## TL;DR\nThe 'h2' Python library fails to reject HTTP/2 streams containing multiple 'Host' headers. If an intermediary proxy downgrades these streams to HTTP/1.1, the duplicate headers are forwarded, triggering HTTP Request Smuggling.\n\n## Technical Details\n\n- **CWE ID**: CWE-444\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 5.3 (Medium)\n- **Impact**: Low Integrity & Availability (Potential HTTP Request Smuggling)\n- **Exploit Status**: none (Theoretical / No public PoCs available)\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Python environments utilizing the h2 (python-hyper) library version <= 4.4.0\n- ASGI web servers and Python reverse proxies performing HTTP/2 to HTTP/1.1 translation\n- **h2**: < 4.4.1 (Fixed in: `4.4.1`)\n\n## Mitigation\n\n- Upgrade the 'h2' library to version 4.4.1 or later immediately.\n- Filter out incoming requests at the outer perimeter proxy (e.g., Cloudflare, AWS ALB, NGINX) that contain multiple Host headers before they reach Python-based backend proxies.\n- Ensure backend web servers or downstream parsers strictly reject any incoming HTTP/1.1 requests containing duplicate Host headers with a 400 Bad Request error code, adhering to RFC 9112 Section 3.2.\n\n**Remediation Steps:**\n1. Run 'pip install --upgrade h2' or update project lockfiles (Poetry, Pipenv) to specify 'h2>=4.4.1'.\n2. Verify the installed version of 'h2' by executing: python -c \"import h2; print(h2.__version__)\"\n3. Restart ASGI servers and Python-based proxies to load the patched dependency code into memory.\n4. Audit downstream systems to confirm that they properly reject requests containing duplicate HTTP/1.1 Host headers.\n\n## References\n\n- [NVD Record for CVE-2026-71554](https://nvd.nist.gov/vuln/detail/CVE-2026-71554)\n- [GitHub Security Advisory GHSA-6hr6-w5qg-qmwg](https://github.com/python-hyper/h2/security/advisories/GHSA-6hr6-w5qg-qmwg)\n- [Vulnerability Fix Commit](https://github.com/python-hyper/h2/commit/292a40829feefda98c8509dcdbbb4a57af9bd6a6)\n- [Python-Hyper h2 Repository](https://github.com/python-hyper/h2)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-71554) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-07T00:07:12.284645Z"}, {"uuid": "363c5ba6-38a4-4e71-826b-02bc15d5e301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71559", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3msipxh3dtl2d", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-71559](https://lists.apache.org/thread/f28bw002p32yt723rvv3dcwdkljys8r3)\nDeserializatio...\nhttps://lists.apache.org/thread/f28bw002p32yt723rvv3dcwdkljys8r3 #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-08-07T14:04:16.080540Z"}]}