{"vulnerability": "cve-2026-93923", "sightings": [{"uuid": "e15238bc-8d90-4863-abe0-bac61629463a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93923", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ieyphvwumu3h5", "content": "CVE-2026-93923 - SiYuan through 3.8.4 Stored XSS via Heading Style Attribute\nCVE ID : CVE-2026-93923\n \n Published : Sept. 19, 2026, 12:16 a.m. | 1\u00a0hour, 7\u00a0minutes ago\n \n Description : SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and book...", "creation_timestamp": "2026-09-19T01:37:33.884064Z"}, {"uuid": "9839501f-833b-4853-a541-8861b0e80ce6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93923", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvu7upqdoy2z", "content": "\ud83d\udfe0 CVE-2026-93923 - High (8.8)\n\nSiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93923/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T08:03:57.171493Z"}, {"uuid": "62092654-3842-4cc8-83a2-b59b4431fed7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93923", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mvu7ur2f3p2c", "content": "\ud83d\udfe0 CVE-2026-93923 - High (8.8)\n\nSiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-93923/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T08:03:57.781020Z"}, {"uuid": "5dd01b0d-996b-44aa-88c8-e7ece98370a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93923", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvupugqhlz2y", "content": "CVE-2026-93923 - siyuan\nVersions of the SiYuan note\u2011taking program up through 3.8.4 do not properly clean certain formatting information in notebook headings. This lets an attacker place specially crafted\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-09-19T12:50:06.666533Z"}, {"uuid": "77d02846-4b2c-42a8-a3d4-134ddd1fed9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93923", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mw5vs3zchb27", "content": "CVE-2026-93923: stored XSS in SiYuan through 3.8.4, unescaped heading style attributes. Executes in Electron renderer with full system access. CVSS 8.8, no patch yet. Treat untrusted notebooks with caution. https://www.valtersit.com/cve/CVE-2026-93923/ #CVE #infosec #SiYuan", "creation_timestamp": "2026-09-23T04:30:09.268903Z"}, {"uuid": "8f0aebee-d666-4b73-ab84-6a63d9bd61b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93923", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117318471411902252", "content": "CVE-2026-93923: stored XSS in SiYuan through 3.8.4, unescaped heading style attributes. Executes in Electron renderer with full system access. CVSS 8.8, no patch yet. Treat untrusted notebooks with caution. https://www.valtersit.com/cve/CVE-2026-93923/ #CVE #infosec #SiYuan", "creation_timestamp": "2026-09-23T04:30:11.442040Z"}]}