{"vulnerability": "cve-2026-82654", "sightings": [{"uuid": "a6acc3cb-0b46-49ca-bf8a-9bc989d0198d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82654", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mucrbeywvr2m", "content": "\ud83d\udfe0 CVE-2026-82654 - High (8.9)\n\nSiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint, backlin...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82654/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T16:02:08.827436Z"}, {"uuid": "cb4654f6-fff1-479f-aa93-8401010622e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82654", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mucrkveezg2e", "content": "\ud83d\udea8 CVE-2026-82654 \u2014 CVSS 9.3 CRITICAL\n\nSiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint, backlink, and bre...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82654\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-30T16:07:26.883656Z"}, {"uuid": "0c4ea036-1fe0-47ec-9cde-fea7f5abad15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82654", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mucsbhesh325", "content": "CVE-2026-82654 - siyuan\nOlder versions of SiYuan do not clean the text used for block names, aliases, and notes when showing hints, backlinks, or navigation paths. An attacker could insert HTML or script\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-08-30T16:20:04.095035Z"}, {"uuid": "53aabd7d-48c7-4b34-b81a-4fb54e528d87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82654", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fzmgcgc7kf4nj", "content": "CVE-2026-82654 - SiYuan before v3.8.1 Stored XSS via block name\nCVE ID : CVE-2026-82654\n \n Published : Aug. 30, 2026, 3:16 p.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : SiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint, backlink, and bre...", "creation_timestamp": "2026-08-30T16:56:47.730743Z"}]}