{"metadata": {"vulnerability": "CVE-2026-73052", "count": 17, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-08-01T00:00:00Z", "date_only": false, "value": "2026-08-01T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-73052", "field": "containers.cna.datePublic"}, {"timestamp": "2026-08-10T19:10:18.100Z", "date_only": false, "value": "2026-08-10T19:10:18.100Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-73052", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-15T21:44:52.569Z", "date_only": false, "value": "2026-08-15T21:44:52.569Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-73052", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-08-15T21:44:52.569Z", "date_only": false, "value": "2026-08-15T21:44:52.569Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-73052", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-15T22:16:55Z", "date_only": false, "value": "2026-08-15T22:16:55Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-65FF-H86C-M5G9", "record": "GHSA-65FF-H86C-M5G9", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-08-15T22:16:55.017Z", "date_only": false, "value": "2026-08-15T22:16:55.017", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-73052", "record": "FKIE_CVE-2026-73052", "field": "published"}, {"timestamp": "2026-08-15T23:00:35.366Z", "date_only": false, "value": "2026-08-15T23:00:35.366969Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt5rntbcd32u", "record": "CVE-2026-73052", "field": "creation_timestamp", "uuid": "81af278d-9e81-40e0-94c5-b3f86e9ccc65", "content": "CVE-2026-73052 - siyuan\nSiYuan's sort menu is vulnerable to JavaScript injection, which can allow attackers to execute code when users open the menu. This is a concern for organizations using SiYuan, as it\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mt5rntbcd32u"}, {"timestamp": "2026-08-15T23:00:48.006Z", "date_only": false, "value": "2026-08-15T23:00:48.006314Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5ro6ib3k2b", "record": "CVE-2026-73052", "field": "creation_timestamp", "uuid": "231651a3-b66c-42e6-9396-ebcfd0be61b5", "content": "\ud83d\udd34 CVE-2026-73052 - Critical (9)\n\nSiYuan before v3.7.4 stores attribute-view field names without HTML escaping and interpolates the...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73052/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5ro6ib3k2b"}, {"timestamp": "2026-08-16T00:31:28Z", "date_only": false, "value": "2026-08-16T00:31:28Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-65FF-H86C-M5G9", "record": "GHSA-65FF-H86C-M5G9", "field": "published"}, {"timestamp": "2026-08-16T00:31:28Z", "date_only": false, "value": "2026-08-16T00:31:28Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-65FF-H86C-M5G9", "record": "GHSA-65FF-H86C-M5G9", "field": "modified"}, {"timestamp": "2026-08-16T04:30:23.963Z", "date_only": false, "value": "2026-08-16T04:30:23.963498Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117103304584954863", "record": "cve-2026-73052", "field": "creation_timestamp", "uuid": "9ab7605b-8898-453e-93b8-273fdd5987ec", "content": "CVE-2026-73052: CRITICAL XSS in SiYuan (&lt;3.7.4) enables arbitrary JS &amp; potential code execution if Node integration is enabled. Desktop users most at risk \u2014 upgrade ASAP &amp; disable Node integration where possible. https://radar.offseq.com/threat/cve-2026-73052-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-c5f0eb8b5e84714b #OffSeq #XSS #SiYuan #Infosec", "url": "https://infosec.exchange/users/offseq/statuses/117103304584954863"}, {"timestamp": "2026-08-16T04:30:25.867Z", "date_only": false, "value": "2026-08-16T04:30:25.867519Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt6e3mlhur2n", "record": "cve-2026-73052", "field": "creation_timestamp", "uuid": "5f0574b2-27d8-41fc-b809-23bf9edb092c", "content": "SiYuan (&lt;3.7.4) hit by CRITICAL XSS (CVE-2026-73052). Desktop clients with Node integration risk code execution. Upgrade to 3.7.4+ &amp; review Node settings. https://radar.offseq.com/threat/cve-2026-73052-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-c5f0eb8b5e8...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mt6e3mlhur2n"}, {"timestamp": "2026-08-17T18:00:07.050Z", "date_only": false, "value": "2026-08-17T18:00:07.050737Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-73052", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-17T18:00:07.050Z", "date_only": false, "value": "2026-08-17T18:00:07.050737Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-73052", "record": "FKIE_CVE-2026-73052", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-17T18:00:16.060Z", "date_only": false, "value": "2026-08-17T18:00:16.060Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-73052", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-17T18:00:16.060Z", "date_only": false, "value": "2026-08-17T18:00:16.060Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-73052", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-26T17:05:08.273Z", "date_only": false, "value": "2026-08-26T17:05:08.273", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-73052", "record": "FKIE_CVE-2026-73052", "field": "lastModified"}]}
