https://vulnerability.circl.lu/sightings/feed 2026-08-24T21:09:52.836776+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/4f8c1f92-dd18-4925-ae5c-fc651afe0066/export 2026-08-24T21:09:52.858869+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4f8c1f92-dd18-4925-ae5c-fc651afe0066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8445", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtsjhyz56t2t", "content": "CVE-2026-8445 - justhtml\nJustHTML can create malicious HTML when converting certain text inputs to Markdown. This can allow an attacker to inject malicious code into your website. To fix this, you should update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#justhtml #pip #CVE #infosec", "creation_timestamp": "2026-08-24T05:00:04.454736Z"} 2026-08-24T05:00:04.454736+00:00 https://vulnerability.circl.lu/sighting/605b5895-3fa6-4d73-bea9-19bf92909164/export 2026-08-24T21:09:52.861904+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "605b5895-3fa6-4d73-bea9-19bf92909164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8445", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117147542223210427", "content": "CVE-2026-8445: EmilStenstrom justhtml <=1.11.0 suffers CRITICAL XSS due to improper escaping in Markdown output. Remote attackers can inject scripts. Update to v1.12.0 now. https://radar.offseq.com/threat/cve-2026-8445-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-42aabed1c30bf24b #OffSeq #XSS #AppSec #CVE20268445", "creation_timestamp": "2026-08-24T04:54:34.671741Z"} 2026-08-24T04:54:34.671741+00:00 https://vulnerability.circl.lu/sighting/78b91783-84fa-4ddf-b5ee-b6fdb90fb303/export 2026-08-24T21:09:52.862054+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "78b91783-84fa-4ddf-b5ee-b6fdb90fb303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8445", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtr6cjtfoo25", "content": "\ud83d\udea8 CVE-2026-8445 \u2014 CVSS 9.3 CRITICAL\n\njusthtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant characters (angle...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-8445\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-23T16:07:29.789664Z"} 2026-08-23T16:07:29.789664+00:00 https://vulnerability.circl.lu/sighting/55570f03-55a6-425a-9382-c3c307718a20/export 2026-08-24T21:09:52.862164+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "55570f03-55a6-425a-9382-c3c307718a20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8445", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jqzngrmyxswa2", "content": "CVE-2026-8445 - justhtml before 1.12.0 Sanitizer Bypass via Markdown\nCVE ID : CVE-2026-8445\n \n Published : Aug. 23, 2026, 2:16 p.m. | 1\u00a0hour, 43\u00a0minutes ago\n \n Description : justhtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant characters...", "creation_timestamp": "2026-08-23T16:06:39.947938Z"} 2026-08-23T16:06:39.947938+00:00 https://vulnerability.circl.lu/sighting/e6b30a61-ce27-46be-8d92-997fd21b7980/export 2026-08-24T21:09:52.862269+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e6b30a61-ce27-46be-8d92-997fd21b7980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8445", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtr2lf3rar26", "content": "\ud83d\udd34 CVE-2026-8445 - Critical (9.8)\n\njusthtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant char...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-8445/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T15:00:52.458116Z"} 2026-08-23T15:00:52.458116+00:00 https://vulnerability.circl.lu/sighting/3ee52a06-43a5-4fac-8d72-b9cae2b411cc/export 2026-08-24T21:09:52.862386+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3ee52a06-43a5-4fac-8d72-b9cae2b411cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8445", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtqzg74ap52e", "content": "CVE-2026-8445 - justhtml\nVersions of justhtml up to 1.11.0 do not properly remove angle\u2011bracket characters when turning content into Markdown. This means an attacker could supply seemingly safe text\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#justhtml #emilstenstrom #CVE #infosec", "creation_timestamp": "2026-08-23T14:40:04.102884Z"} 2026-08-23T14:40:04.102884+00:00