https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 24 Aug 2026 21:09:53 +0000 https://vulnerability.circl.lu/sighting/4f8c1f92-dd18-4925-ae5c-fc651afe0066/export {"uuid": "4f8c1f92-dd18-4925-ae5c-fc651afe0066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8445", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtsjhyz56t2t", "content": "CVE-2026-8445 - justhtml\nJustHTML can create malicious HTML when converting certain text inputs to Markdown. This can allow an attacker to inject malicious code into your website. To fix this, you should update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#justhtml #pip #CVE #infosec", "creation_timestamp": "2026-08-24T05:00:04.454736Z"} {"uuid": "4f8c1f92-dd18-4925-ae5c-fc651afe0066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8445", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtsjhyz56t2t", "content": "CVE-2026-8445 - justhtml\nJustHTML can create malicious HTML when converting certain text inputs to Markdown. This can allow an attacker to inject malicious code into your website. To fix this, you should update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#justhtml #pip #CVE #infosec", "creation_timestamp": "2026-08-24T05:00:04.454736Z"} https://vulnerability.circl.lu/sighting/4f8c1f92-dd18-4925-ae5c-fc651afe0066/export Mon, 24 Aug 2026 05:00:04 +0000 https://vulnerability.circl.lu/sighting/605b5895-3fa6-4d73-bea9-19bf92909164/export {"uuid": "605b5895-3fa6-4d73-bea9-19bf92909164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8445", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117147542223210427", "content": "CVE-2026-8445: EmilStenstrom justhtml <=1.11.0 suffers CRITICAL XSS due to improper escaping in Markdown output. Remote attackers can inject scripts. Update to v1.12.0 now. https://radar.offseq.com/threat/cve-2026-8445-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-42aabed1c30bf24b #OffSeq #XSS #AppSec #CVE20268445", "creation_timestamp": "2026-08-24T04:54:34.671741Z"} {"uuid": "605b5895-3fa6-4d73-bea9-19bf92909164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8445", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117147542223210427", "content": "CVE-2026-8445: EmilStenstrom justhtml <=1.11.0 suffers CRITICAL XSS due to improper escaping in Markdown output. Remote attackers can inject scripts. Update to v1.12.0 now. https://radar.offseq.com/threat/cve-2026-8445-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-42aabed1c30bf24b #OffSeq #XSS #AppSec #CVE20268445", "creation_timestamp": "2026-08-24T04:54:34.671741Z"} https://vulnerability.circl.lu/sighting/605b5895-3fa6-4d73-bea9-19bf92909164/export Mon, 24 Aug 2026 04:54:34 +0000 https://vulnerability.circl.lu/sighting/78b91783-84fa-4ddf-b5ee-b6fdb90fb303/export {"uuid": "78b91783-84fa-4ddf-b5ee-b6fdb90fb303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8445", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtr6cjtfoo25", "content": "\ud83d\udea8 CVE-2026-8445 \u2014 CVSS 9.3 CRITICAL\n\njusthtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant characters (angle...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-8445\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-23T16:07:29.789664Z"} {"uuid": "78b91783-84fa-4ddf-b5ee-b6fdb90fb303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8445", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtr6cjtfoo25", "content": "\ud83d\udea8 CVE-2026-8445 \u2014 CVSS 9.3 CRITICAL\n\njusthtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant characters (angle...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-8445\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-23T16:07:29.789664Z"} https://vulnerability.circl.lu/sighting/78b91783-84fa-4ddf-b5ee-b6fdb90fb303/export Sun, 23 Aug 2026 16:07:29 +0000 https://vulnerability.circl.lu/sighting/55570f03-55a6-425a-9382-c3c307718a20/export {"uuid": "55570f03-55a6-425a-9382-c3c307718a20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8445", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jqzngrmyxswa2", "content": "CVE-2026-8445 - justhtml before 1.12.0 Sanitizer Bypass via Markdown\nCVE ID : CVE-2026-8445\n \n Published : Aug. 23, 2026, 2:16 p.m. | 1\u00a0hour, 43\u00a0minutes ago\n \n Description : justhtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant characters...", "creation_timestamp": "2026-08-23T16:06:39.947938Z"} {"uuid": "55570f03-55a6-425a-9382-c3c307718a20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8445", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jqzngrmyxswa2", "content": "CVE-2026-8445 - justhtml before 1.12.0 Sanitizer Bypass via Markdown\nCVE ID : CVE-2026-8445\n \n Published : Aug. 23, 2026, 2:16 p.m. | 1\u00a0hour, 43\u00a0minutes ago\n \n Description : justhtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant characters...", "creation_timestamp": "2026-08-23T16:06:39.947938Z"} https://vulnerability.circl.lu/sighting/55570f03-55a6-425a-9382-c3c307718a20/export Sun, 23 Aug 2026 16:06:39 +0000 https://vulnerability.circl.lu/sighting/e6b30a61-ce27-46be-8d92-997fd21b7980/export {"uuid": "e6b30a61-ce27-46be-8d92-997fd21b7980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8445", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtr2lf3rar26", "content": "\ud83d\udd34 CVE-2026-8445 - Critical (9.8)\n\njusthtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant char...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-8445/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T15:00:52.458116Z"} {"uuid": "e6b30a61-ce27-46be-8d92-997fd21b7980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8445", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtr2lf3rar26", "content": "\ud83d\udd34 CVE-2026-8445 - Critical (9.8)\n\njusthtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant char...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-8445/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T15:00:52.458116Z"} https://vulnerability.circl.lu/sighting/e6b30a61-ce27-46be-8d92-997fd21b7980/export Sun, 23 Aug 2026 15:00:52 +0000 https://vulnerability.circl.lu/sighting/3ee52a06-43a5-4fac-8d72-b9cae2b411cc/export {"uuid": "3ee52a06-43a5-4fac-8d72-b9cae2b411cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8445", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtqzg74ap52e", "content": "CVE-2026-8445 - justhtml\nVersions of justhtml up to 1.11.0 do not properly remove angle\u2011bracket characters when turning content into Markdown. This means an attacker could supply seemingly safe text\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#justhtml #emilstenstrom #CVE #infosec", "creation_timestamp": "2026-08-23T14:40:04.102884Z"} {"uuid": "3ee52a06-43a5-4fac-8d72-b9cae2b411cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8445", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtqzg74ap52e", "content": "CVE-2026-8445 - justhtml\nVersions of justhtml up to 1.11.0 do not properly remove angle\u2011bracket characters when turning content into Markdown. This means an attacker could supply seemingly safe text\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#justhtml #emilstenstrom #CVE #infosec", "creation_timestamp": "2026-08-23T14:40:04.102884Z"} https://vulnerability.circl.lu/sighting/3ee52a06-43a5-4fac-8d72-b9cae2b411cc/export Sun, 23 Aug 2026 14:40:04 +0000