{"vulnerability": "cve-2026-8209", "sightings": [{"uuid": "02e780ab-1ce0-4df6-b5bd-1c8c06c2de0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8209", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlfj3m6ba52e", "content": "CVE-2026-8209 - Gibbon Path Traversal DOS\nCVE ID : CVE-2026-8209\n \n Published : May 9, 2026, 3:19 a.m. | 1\u00a0hour, 6\u00a0minutes ago\n \n Description : Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction of web appli...", "creation_timestamp": "2026-05-09T05:26:58.641151Z"}, {"uuid": "8dcc0186-8d03-4dbb-aaed-92212f97af09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82090", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu6oxex4sm2p", "content": "CVE-2026-82090\nThe Pocket application (through version 8.33.0.0) can be tricked into inserting outside content that runs hidden scripts. This could allow an attacker to change what the app shows or does without your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T01:10:05.682945Z"}, {"uuid": "9969de0c-1d61-4e35-b80d-b08677cfd26e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82090", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu4p5kipnr2e", "content": "\ud83d\udea8 CVE-2026-82090 \u2014 CVSS 9.2 CRITICAL\n\nPocket through 8.33.0.0 allows XSS because \"Save to Pocket\" injects external HTML into the DOM.\u00a0\u00a0JavaScript...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82090\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T06:08:14.285800Z"}, {"uuid": "1909afc3-db60-4c76-bc8b-7ef4d3097785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82090", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gb7bzwqhkfxf3", "content": "CVE-2026-82090 - Pocket Cross-Site Scripting Vulnerability\nCVE ID : CVE-2026-82090\n \n Published : Aug. 28, 2026, 5:16 a.m. | 51\u00a0minutes ago\n \n Description : Pocket through 8.33.0.0 allows XSS because \"Save to Pocket\" injects external HTML into the DOM.\u00a0\u00a0JavaScript code can alt...", "creation_timestamp": "2026-08-28T06:27:24.098571Z"}]}