{"vulnerability": "cve-2026-5389", "sightings": [{"uuid": "898b319e-caa2-4169-934b-b6ebe8ec40ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53899", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mofxfuqupl2j", "content": "CVE-2026-53899 - Cross-origin cookies could be leaked when opening a PDF link\nCVE ID : CVE-2026-53899\n \n Published : June 16, 2026, 1:16 p.m. | 25\u00a0minutes ago\n \n Description : Firefox for iOS used partial domain matching when attaching cookies to PDF requests, allowing a malic...", "creation_timestamp": "2026-06-16T13:58:50.406445Z"}, {"uuid": "48962b06-217a-43a2-a665-50f9f40d0776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53899", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260618", "content": "", "creation_timestamp": "2026-06-17T20:00:00.000000Z"}, {"uuid": "c1d745e6-473b-4e80-9683-82acccd2c019", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5389", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mttfbldduo26", "content": "CVE-2026-5389 is trending. Hype score 3, currently #9 on cvemon.\n\njusthtml versions before 1.13.0 contain a cross-site scripting vulnerability in the to_markdown() function when serializing attacker-controlled pre content. Attackers can place\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-5389", "creation_timestamp": "2026-08-24T13:17:33.392350Z"}]}