{"metadata": {"vulnerability": "CVE-2026-93923", "count": 19, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-18T00:00:00Z", "date_only": false, "value": "2026-09-18T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-93923", "field": "containers.cna.datePublic"}, {"timestamp": "2026-09-18T21:57:00.454Z", "date_only": false, "value": "2026-09-18T21:57:00.454Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-93923", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-18T23:12:09.139Z", "date_only": false, "value": "2026-09-18T23:12:09.139Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-93923", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-18T23:12:09.139Z", "date_only": false, "value": "2026-09-18T23:12:09.139Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-93923", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-19T00:16:57Z", "date_only": false, "value": "2026-09-19T00:16:57Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QVP6-CJG5-8753", "record": "GHSA-QVP6-CJG5-8753", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-19T00:16:57.963Z", "date_only": false, "value": "2026-09-19T00:16:57.963", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-93923", "record": "FKIE_CVE-2026-93923", "field": "published"}, {"timestamp": "2026-09-19T00:32:44Z", "date_only": false, "value": "2026-09-19T00:32:44Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QVP6-CJG5-8753", "record": "GHSA-QVP6-CJG5-8753", "field": "published"}, {"timestamp": "2026-09-19T00:32:44Z", "date_only": false, "value": "2026-09-19T00:32:44Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QVP6-CJG5-8753", "record": "GHSA-QVP6-CJG5-8753", "field": "modified"}, {"timestamp": "2026-09-19T01:37:33.884Z", "date_only": false, "value": "2026-09-19T01:37:33.884064Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ieyphvwumu3h5", "record": "CVE-2026-93923", "field": "creation_timestamp", "uuid": "e15238bc-8d90-4863-abe0-bac61629463a", "content": "CVE-2026-93923 - SiYuan through 3.8.4 Stored XSS via Heading Style Attribute\nCVE ID : CVE-2026-93923\n \n Published : Sept. 19, 2026, 12:16 a.m. | 1\u00a0hour, 7\u00a0minutes ago\n \n Description : SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and book...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/ieyphvwumu3h5"}, {"timestamp": "2026-09-19T08:03:57.171Z", "date_only": false, "value": "2026-09-19T08:03:57.171493Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvu7upqdoy2z", "record": "CVE-2026-93923", "field": "creation_timestamp", "uuid": "9839501f-833b-4853-a541-8861b0e80ce6", "content": "\ud83d\udfe0 CVE-2026-93923 - High (8.8)\n\nSiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93923/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvu7upqdoy2z"}, {"timestamp": "2026-09-19T08:03:57.781Z", "date_only": false, "value": "2026-09-19T08:03:57.781020Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/potato.software/post/3mvu7ur2f3p2c", "record": "CVE-2026-93923", "field": "creation_timestamp", "uuid": "62092654-3842-4cc8-83a2-b59b4431fed7", "content": "\ud83d\udfe0 CVE-2026-93923 - High (8.8)\n\nSiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-93923/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/potato.software/post/3mvu7ur2f3p2c"}, {"timestamp": "2026-09-19T12:50:06.666Z", "date_only": false, "value": "2026-09-19T12:50:06.666533Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvupugqhlz2y", "record": "CVE-2026-93923", "field": "creation_timestamp", "uuid": "5dd01b0d-996b-44aa-88c8-e7ece98370a6", "content": "CVE-2026-93923 - siyuan\nVersions of the SiYuan note\u2011taking program up through 3.8.4 do not properly clean certain formatting information in notebook headings. This lets an attacker place specially crafted\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mvupugqhlz2y"}, {"timestamp": "2026-09-21T15:38:34.747Z", "date_only": false, "value": "2026-09-21T15:38:34.747243Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-93923", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-21T15:38:34.747Z", "date_only": false, "value": "2026-09-21T15:38:34.747243Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-93923", "record": "FKIE_CVE-2026-93923", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-21T15:39:08.068Z", "date_only": false, "value": "2026-09-21T15:39:08.068Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-93923", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-21T15:39:08.068Z", "date_only": false, "value": "2026-09-21T15:39:08.068Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-93923", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-21T16:17:28.387Z", "date_only": false, "value": "2026-09-21T16:17:28.387", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-93923", "record": "FKIE_CVE-2026-93923", "field": "lastModified"}, {"timestamp": "2026-09-23T04:30:09.268Z", "date_only": false, "value": "2026-09-23T04:30:09.268903Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mw5vs3zchb27", "record": "CVE-2026-93923", "field": "creation_timestamp", "uuid": "77d02846-4b2c-42a8-a3d4-134ddd1fed9a", "content": "CVE-2026-93923: stored XSS in SiYuan through 3.8.4, unescaped heading style attributes. Executes in Electron renderer with full system access. CVSS 8.8, no patch yet. Treat untrusted notebooks with caution. https://www.valtersit.com/cve/CVE-2026-93923/ #CVE #infosec #SiYuan", "url": "https://bsky.app/profile/hugovalters.bsky.social/post/3mw5vs3zchb27"}, {"timestamp": "2026-09-23T04:30:11.442Z", "date_only": false, "value": "2026-09-23T04:30:11.442040Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/hugovalters/statuses/117318471411902252", "record": "CVE-2026-93923", "field": "creation_timestamp", "uuid": "8f0aebee-d666-4b73-ab84-6a63d9bd61b2", "content": "CVE-2026-93923: stored XSS in SiYuan through 3.8.4, unescaped heading style attributes. Executes in Electron renderer with full system access. CVSS 8.8, no patch yet. Treat untrusted notebooks with caution. https://www.valtersit.com/cve/CVE-2026-93923/ #CVE #infosec #SiYuan", "url": "https://mastodon.social/users/hugovalters/statuses/117318471411902252"}]}