{"vulnerability": "cve-2026-8142", "sightings": [{"uuid": "3d30aaa3-7ddd-4353-ba81-677272c7743d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8142", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlca2zkgkf2q", "content": "CVE-2026-8142 - CVE-2026-8142\nCVE ID : CVE-2026-8142\n \n Published : May 7, 2026, 7:54 p.m. | 30\u00a0minutes ago\n \n Description : VINCE versions 3.0.38 and earlier do not properly verify the From address authenticity due to encoding confusion and use the from address for automated ...", "creation_timestamp": "2026-05-07T22:07:36.142724Z"}]}