https://db.gcve.eu/sightings/feed 2026-07-23T01:08:58.484929+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent sightings. https://db.gcve.eu/sighting/06441e1c-48e8-4c39-898a-b095a101d2bc/export 2026-07-23T01:08:58.505893+00:00 sync_user https://db.gcve.eu/user/sync_user {"uuid": "06441e1c-48e8-4c39-898a-b095a101d2bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2020-26305", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqf7b6vk5525", "content": "", "creation_timestamp": "2026-07-11T17:37:07.044311Z"} 2026-07-11T17:37:07.044311+00:00 https://db.gcve.eu/sighting/91f2c43a-1c82-49e9-b481-59926e0ddb31/export 2026-07-23T01:08:58.507333+00:00 sync_user https://db.gcve.eu/user/sync_user {"uuid": "91f2c43a-1c82-49e9-b481-59926e0ddb31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2020-26304", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqf5ljzg6x2o", "content": "", "creation_timestamp": "2026-07-11T17:07:06.432355Z"} 2026-07-11T17:07:06.432355+00:00 https://db.gcve.eu/sighting/cc9dc986-9b4d-4489-a186-4a1c42346e53/export 2026-07-23T01:08:58.507452+00:00 sync_user https://db.gcve.eu/user/sync_user {"uuid": "cc9dc986-9b4d-4489-a186-4a1c42346e53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2020-26303", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqf3vuyrpc2m", "content": "", "creation_timestamp": "2026-07-11T16:37:06.514850Z"} 2026-07-11T16:37:06.514850+00:00 https://db.gcve.eu/sighting/d69408c5-37b7-40e1-8a37-8b7ca3032928/export 2026-07-23T01:08:58.507539+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "d69408c5-37b7-40e1-8a37-8b7ca3032928", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26302", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11625", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2020-26302\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: is.js is a general-purpose check library. Versions 0.9.0 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). is.js uses a regex copy-pasted from a gist to validate URLs. Trying to validate a malicious string can cause the regex to loop \u201cforever.\" This vulnerability was found using a CodeQL query which identifies inefficient regular expressions. is.js has no patch for this issue.\n\ud83d\udccf Published: 2022-12-23T23:03:51.372Z\n\ud83d\udccf Modified: 2025-04-14T14:37:16.925Z\n\ud83d\udd17 References:\n1. https://securitylab.github.com/advisories/GHSL-2020-295-redos-is.js\n2. https://github.com/arasatasaygin/is.js/issues/320", "creation_timestamp": "2025-04-14T14:53:52.000000Z"} 2025-04-14T14:53:52+00:00 https://db.gcve.eu/sighting/0ddf8876-6aed-43ef-9a29-53ded2f7b837/export 2026-07-23T01:08:58.508512+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "0ddf8876-6aed-43ef-9a29-53ded2f7b837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26307", "type": "seen", "source": "https://t.me/cvedetector/9043", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2020-26307 - HTML2Markdown ReDoS Vulnerability\", \n \"Content\": \"CVE ID : CVE-2020-26307 \nPublished : Oct. 26, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : HTML2Markdown is a Javascript implementation for converting HTML to Markdown text. All available versions contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"26 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-27T00:01:05.000000Z"} 2024-10-27T00:01:05+00:00 https://db.gcve.eu/sighting/666e3354-78e1-4801-8438-38449f3d6f4b/export 2026-07-23T01:08:58.508632+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "666e3354-78e1-4801-8438-38449f3d6f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26306", "type": "seen", "source": "https://t.me/cvedetector/9042", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2020-26306 - Knwl.js Regular Expression Denial of Service (ReDoS) Vulnerability\", \n \"Content\": \"CVE ID : CVE-2020-26306 \nPublished : Oct. 26, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : Knwl.js is a Javascript library that parses through text for dates, times, phone numbers, emails, places, and more. Versions 1.0.2 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"26 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-27T00:01:05.000000Z"} 2024-10-27T00:01:05+00:00 https://db.gcve.eu/sighting/b88bb023-e58d-4ea8-8a7b-7702a1d8a2c1/export 2026-07-23T01:08:58.508718+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "b88bb023-e58d-4ea8-8a7b-7702a1d8a2c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26305", "type": "seen", "source": "https://t.me/cvedetector/9041", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2020-26305 - CommonRegexJS Regular Expression Denial of Service (ReDoS)\", \n \"Content\": \"CVE ID : CVE-2020-26305 \nPublished : Oct. 26, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : CommonRegexJS is a CommonRegex port for JavaScript. All available versions contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"26 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-27T00:01:04.000000Z"} 2024-10-27T00:01:04+00:00 https://db.gcve.eu/sighting/acacbe26-3374-4e1b-83b0-3675080ab2f4/export 2026-07-23T01:08:58.508805+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "acacbe26-3374-4e1b-83b0-3675080ab2f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26304", "type": "seen", "source": "https://t.me/cvedetector/9040", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2020-26304 - Foundation Regular Expression Denial of Service (ReDoS) Vulnerability\", \n \"Content\": \"CVE ID : CVE-2020-26304 \nPublished : Oct. 26, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : Foundation is a front-end framework. Versions 6.3.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, it is unknown if any fixes are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"26 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-27T00:01:03.000000Z"} 2024-10-27T00:01:03+00:00 https://db.gcve.eu/sighting/2c3d7b11-33ba-42c7-be4e-da58d9c48591/export 2026-07-23T01:08:58.508884+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "2c3d7b11-33ba-42c7-be4e-da58d9c48591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26303", "type": "seen", "source": "https://t.me/cvedetector/9039", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2020-26303 - Insane HTML Sanitizer ReDoS Vulnerability\", \n \"Content\": \"CVE ID : CVE-2020-26303 \nPublished : Oct. 26, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : insane is a whitelist-oriented HTML sanitizer. Versions 2.6.2 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"26 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-27T00:01:00.000000Z"} 2024-10-27T00:01:00+00:00 https://db.gcve.eu/sighting/324c885e-e744-4183-a7b4-cbcc0732082a/export 2026-07-23T01:08:58.508971+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "324c885e-e744-4183-a7b4-cbcc0732082a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26309", "type": "seen", "source": "https://t.me/cvedetector/9037", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2020-26309 - Validate.js Regular Expression Denial of Service (ReDoS) Vulnerability\", \n \"Content\": \"CVE ID : CVE-2020-26309 \nPublished : Oct. 26, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : Validate.js provides a declarative way of validating javascript objects. Versions 0.11.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, it is unknown if any patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"26 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-27T00:00:58.000000Z"} 2024-10-27T00:00:58+00:00