{"vulnerability": "CVE-2026-78847", "sightings": [{"uuid": "317ea265-8eb0-4b7b-b92d-f0c5caa9fe02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78847", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw4luv2dto2j", "content": "CVE-2026-78847\nIf your application uses gray-matter to read front\u2011matter and allows the language to be set to JavaScript, the library may execute that code automatically. This could let an attacker run arbitrary commands on\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-22T16:00:04.504826Z"}, {"uuid": "e5205b31-b6f2-4111-aa04-e4d59fe733a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78847", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mw4mcq6wg62w", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-78847: An issue in gray-matter All versions (verified on 4.0.3) allows the JavaScript engine in lib/engines.js using eval() to parse front matter when \u2026\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-78847\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-22T16:07:49.244830Z"}]}