https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 18 Aug 2026 16:50:58 +0000 https://vulnerability.circl.lu/sighting/71e6bdbe-496c-4e33-8387-30c09d519fb5/export {"uuid": "71e6bdbe-496c-4e33-8387-30c09d519fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73053", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt672pkueq2f", "content": "SiYuan (pre-v3.7.4) hit by CRITICAL XSS (CVE-2026-73053). Crafted icons can execute code if Node integration is enabled. Patch status unclear \u2014 disable Node integration to reduce risk. https://radar.offseq.com/threat/cve-2026-73053-improper-neutralization-of-input-during-web-page-generation-cross...", "creation_timestamp": "2026-08-16T03:00:26.672103Z"} {"uuid": "71e6bdbe-496c-4e33-8387-30c09d519fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73053", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt672pkueq2f", "content": "SiYuan (pre-v3.7.4) hit by CRITICAL XSS (CVE-2026-73053). Crafted icons can execute code if Node integration is enabled. Patch status unclear \u2014 disable Node integration to reduce risk. https://radar.offseq.com/threat/cve-2026-73053-improper-neutralization-of-input-during-web-page-generation-cross...", "creation_timestamp": "2026-08-16T03:00:26.672103Z"} https://vulnerability.circl.lu/sighting/71e6bdbe-496c-4e33-8387-30c09d519fb5/export Sun, 16 Aug 2026 03:00:26 +0000 https://vulnerability.circl.lu/sighting/8dd1c70e-cb4d-485e-9e80-fbfd394486b7/export {"uuid": "8dd1c70e-cb4d-485e-9e80-fbfd394486b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73053", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117102950741905319", "content": "CVE-2026-73053: CRITICAL XSS in SiYuan (pre-v3.7.4) risks code execution on host via crafted icons when Node integration is enabled. No patch confirmed \u2014 disable Node integration or avoid untrusted files. https://radar.offseq.com/threat/cve-2026-73053-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-1654398c24cf93d4 #OffSeq #XSS #Vuln #SiYuan", "creation_timestamp": "2026-08-16T03:00:24.940233Z"} {"uuid": "8dd1c70e-cb4d-485e-9e80-fbfd394486b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73053", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117102950741905319", "content": "CVE-2026-73053: CRITICAL XSS in SiYuan (pre-v3.7.4) risks code execution on host via crafted icons when Node integration is enabled. No patch confirmed \u2014 disable Node integration or avoid untrusted files. https://radar.offseq.com/threat/cve-2026-73053-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-1654398c24cf93d4 #OffSeq #XSS #Vuln #SiYuan", "creation_timestamp": "2026-08-16T03:00:24.940233Z"} https://vulnerability.circl.lu/sighting/8dd1c70e-cb4d-485e-9e80-fbfd394486b7/export Sun, 16 Aug 2026 03:00:24 +0000 https://vulnerability.circl.lu/sighting/1d14df5b-be94-4b40-8440-9b42b31bf3fb/export {"uuid": "1d14df5b-be94-4b40-8440-9b42b31bf3fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73053", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt5s6twgr42y", "content": "CVE-2026-73053 - siyuan\nSiYuan versions before v3.7.4 have a security flaw that allows attackers to create malicious document icons. These icons can execute code on the host system if Node integration is\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-08-15T23:10:07.440016Z"} {"uuid": "1d14df5b-be94-4b40-8440-9b42b31bf3fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73053", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt5s6twgr42y", "content": "CVE-2026-73053 - siyuan\nSiYuan versions before v3.7.4 have a security flaw that allows attackers to create malicious document icons. These icons can execute code on the host system if Node integration is\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-08-15T23:10:07.440016Z"} https://vulnerability.circl.lu/sighting/1d14df5b-be94-4b40-8440-9b42b31bf3fb/export Sat, 15 Aug 2026 23:10:07 +0000 https://vulnerability.circl.lu/sighting/8770c55f-7a13-4124-856b-a723390e31fb/export {"uuid": "8770c55f-7a13-4124-856b-a723390e31fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73053", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5rofofwi2l", "content": "\ud83d\udd34 CVE-2026-73053 - Critical (9)\n\nSiYuan versions before v3.7.4 contain a cross-site scripting vulnerability in the unicode2Emoji f...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73053/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-15T23:00:55.308515Z"} {"uuid": "8770c55f-7a13-4124-856b-a723390e31fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73053", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5rofofwi2l", "content": "\ud83d\udd34 CVE-2026-73053 - Critical (9)\n\nSiYuan versions before v3.7.4 contain a cross-site scripting vulnerability in the unicode2Emoji f...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73053/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-15T23:00:55.308515Z"} https://vulnerability.circl.lu/sighting/8770c55f-7a13-4124-856b-a723390e31fb/export Sat, 15 Aug 2026 23:00:55 +0000