{"vulnerability": "cve-2026-73052", "sightings": [{"uuid": "81af278d-9e81-40e0-94c5-b3f86e9ccc65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73052", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt5rntbcd32u", "content": "CVE-2026-73052 - siyuan\nSiYuan's sort menu is vulnerable to JavaScript injection, which can allow attackers to execute code when users open the menu. This is a concern for organizations using SiYuan, as it\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-08-15T23:00:35.366969Z"}, {"uuid": "231651a3-b66c-42e6-9396-ebcfd0be61b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73052", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5ro6ib3k2b", "content": "\ud83d\udd34 CVE-2026-73052 - Critical (9)\n\nSiYuan before v3.7.4 stores attribute-view field names without HTML escaping and interpolates the...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73052/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-15T23:00:48.006314Z"}, {"uuid": "9ab7605b-8898-453e-93b8-273fdd5987ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73052", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117103304584954863", "content": "CVE-2026-73052: CRITICAL XSS in SiYuan (<3.7.4) enables arbitrary JS & potential code execution if Node integration is enabled. Desktop users most at risk \u2014 upgrade ASAP & disable Node integration where possible. https://radar.offseq.com/threat/cve-2026-73052-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-c5f0eb8b5e84714b #OffSeq #XSS #SiYuan #Infosec", "creation_timestamp": "2026-08-16T04:30:23.963498Z"}, {"uuid": "5f0574b2-27d8-41fc-b809-23bf9edb092c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73052", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt6e3mlhur2n", "content": "SiYuan (<3.7.4) hit by CRITICAL XSS (CVE-2026-73052). Desktop clients with Node integration risk code execution. Upgrade to 3.7.4+ & review Node settings. https://radar.offseq.com/threat/cve-2026-73052-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-c5f0eb8b5e8...", "creation_timestamp": "2026-08-16T04:30:25.867519Z"}]}