<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 28 May 2026 13:14:31 +0000</lastBuildDate>
    <item>
      <title>74515fea-aba4-41a5-9e78-f5fb55cf5e93</title>
      <link>https://db.gcve.eu/sighting/74515fea-aba4-41a5-9e78-f5fb55cf5e93/export</link>
      <description>{"uuid": "74515fea-aba4-41a5-9e78-f5fb55cf5e93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-JMJ6-P2J9-68CP", "type": "seen", "source": "https://t.me/arpsyndicate/2235", "content": "#ExploitObserverAlert\n\nGHSA-jmj6-p2j9-68cp\n\nDESCRIPTION: Exploit Observer has 3 entries related to GHSA-JMJ6-P2J9-68CP. wildfly-elytron: possible timing attacks via use of unsafe comparator. A flaw was found in Wildfly-elytron. Wildfly-elytron uses java.util.Arrays.equals in several places, which is unsafe and vulnerable to timing attacks. To compare values securely, use java.security.MessageDigest.isEqual instead. This flaw allows an attacker to access secure information or impersonate an authed user.\n\nGHSS: 7.4", "creation_timestamp": "2023-12-29T10:32:24.000000Z"}</description>
      <content:encoded>{"uuid": "74515fea-aba4-41a5-9e78-f5fb55cf5e93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-JMJ6-P2J9-68CP", "type": "seen", "source": "https://t.me/arpsyndicate/2235", "content": "#ExploitObserverAlert\n\nGHSA-jmj6-p2j9-68cp\n\nDESCRIPTION: Exploit Observer has 3 entries related to GHSA-JMJ6-P2J9-68CP. wildfly-elytron: possible timing attacks via use of unsafe comparator. A flaw was found in Wildfly-elytron. Wildfly-elytron uses java.util.Arrays.equals in several places, which is unsafe and vulnerable to timing attacks. To compare values securely, use java.security.MessageDigest.isEqual instead. This flaw allows an attacker to access secure information or impersonate an authed user.\n\nGHSS: 7.4", "creation_timestamp": "2023-12-29T10:32:24.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/74515fea-aba4-41a5-9e78-f5fb55cf5e93/export</guid>
      <pubDate>Fri, 29 Dec 2023 10:32:24 +0000</pubDate>
    </item>
    <item>
      <title>ae93ef56-019c-4f61-b4d5-86fd3002c569</title>
      <link>https://db.gcve.eu/sighting/ae93ef56-019c-4f61-b4d5-86fd3002c569/export</link>
      <description>{"uuid": "ae93ef56-019c-4f61-b4d5-86fd3002c569", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-jmj6-p2j9-68cp", "type": "seen", "source": "https://gist.github.com/safer-bot/9e63934fd6e0eaa1e038643bf4aad55a", "content": "", "creation_timestamp": "2025-07-16T23:09:23.000000Z"}</description>
      <content:encoded>{"uuid": "ae93ef56-019c-4f61-b4d5-86fd3002c569", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-jmj6-p2j9-68cp", "type": "seen", "source": "https://gist.github.com/safer-bot/9e63934fd6e0eaa1e038643bf4aad55a", "content": "", "creation_timestamp": "2025-07-16T23:09:23.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/ae93ef56-019c-4f61-b4d5-86fd3002c569/export</guid>
      <pubDate>Wed, 16 Jul 2025 23:09:23 +0000</pubDate>
    </item>
  </channel>
</rss>
