{"vulnerability": "cve-2026-100645", "sightings": [{"uuid": "13b83ec4-93d0-43e4-b9ad-fd64390d55f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100645", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhzv6hqiz2u", "content": "CVE-2026-100645 - siyuan\nVersions of SiYuan before 3.8.4 let a specially crafted description in the gallery or kanban view insert hidden code. When that code runs, it can launch any program on the computer\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-09-27T05:10:04.488705Z"}, {"uuid": "285665a3-d7be-430d-b934-68824c607b04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100645", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwkamub3st2d", "content": "\ud83d\udfe0 CVE-2026-100645 - High (8)\n\nSiYuan versions 3.7.0 before 3.8.4 contain a stored cross-site scripting vulnerability in gallery...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100645/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T02:16:02.380397Z"}]}