{"uuid": "6af79742-7247-4389-a30a-21f22321b00f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54158", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mp3lttwe2q2w", "content": "SiYuan (&lt;3.7.0) hit by CRITICAL XSS (CVE-2026-54158) enabling persistent JavaScript injection and possible RCE on Electron clients. Upgrade to 3.7.0+ immediately. Details: https://radar.offseq.com/threat/cve-2026-54158-cwe-79-improper-neutralization-of-i-cee0850f8d1e1264 #OffSeq #CVE202654158 #Si...", "creation_timestamp": "2026-06-25T04:30:29.289348Z"}