{"vulnerability": "cve-2026-8445", "sightings": [{"uuid": "3ee52a06-43a5-4fac-8d72-b9cae2b411cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8445", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtqzg74ap52e", "content": "CVE-2026-8445 - justhtml\nVersions of justhtml up to 1.11.0 do not properly remove angle\u2011bracket characters when turning content into Markdown. This means an attacker could supply seemingly safe text\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#justhtml #emilstenstrom #CVE #infosec", "creation_timestamp": "2026-08-23T14:40:04.102884Z"}, {"uuid": "e6b30a61-ce27-46be-8d92-997fd21b7980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8445", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtr2lf3rar26", "content": "\ud83d\udd34 CVE-2026-8445 - Critical (9.8)\n\njusthtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant char...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-8445/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T15:00:52.458116Z"}, {"uuid": "55570f03-55a6-425a-9382-c3c307718a20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8445", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jqzngrmyxswa2", "content": "CVE-2026-8445 - justhtml before 1.12.0 Sanitizer Bypass via Markdown\nCVE ID : CVE-2026-8445\n \n Published : Aug. 23, 2026, 2:16 p.m. | 1\u00a0hour, 43\u00a0minutes ago\n \n Description : justhtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant characters...", "creation_timestamp": "2026-08-23T16:06:39.947938Z"}, {"uuid": "78b91783-84fa-4ddf-b5ee-b6fdb90fb303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8445", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtr6cjtfoo25", "content": "\ud83d\udea8 CVE-2026-8445 \u2014 CVSS 9.3 CRITICAL\n\njusthtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant characters (angle...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-8445\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-23T16:07:29.789664Z"}, {"uuid": "605b5895-3fa6-4d73-bea9-19bf92909164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8445", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117147542223210427", "content": "CVE-2026-8445: EmilStenstrom justhtml <=1.11.0 suffers CRITICAL XSS due to improper escaping in Markdown output. Remote attackers can inject scripts. Update to v1.12.0 now. https://radar.offseq.com/threat/cve-2026-8445-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-42aabed1c30bf24b #OffSeq #XSS #AppSec #CVE20268445", "creation_timestamp": "2026-08-24T04:54:34.671741Z"}, {"uuid": "4f8c1f92-dd18-4925-ae5c-fc651afe0066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8445", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtsjhyz56t2t", "content": "CVE-2026-8445 - justhtml\nJustHTML can create malicious HTML when converting certain text inputs to Markdown. This can allow an attacker to inject malicious code into your website. To fix this, you should update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#justhtml #pip #CVE #infosec", "creation_timestamp": "2026-08-24T05:00:04.454736Z"}]}