SiYuan Stored XSS leading to Electron RCE via unescaped data-obj attribute

github.com 2026-06-27查看中文 →

Security AdvisoryCVE-2026-55570CriticalSiYuan

Affected:

SiYuan kernel <= v3.6.5

Fixed in:

v3.7.0

Referenced CVEs: CVE-2026-55570 · 9.0

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Buffer Overflow Vulnerability in UTT HIPER 1250GW Router with POC via /goform/ConfigWirelessBase_5g 2026-07-05 AD Miner Cache Deserialization Vulnerability Fix (RCE) 2026-07-05 AD Miner Unsafe Pickle Deserialization Vulnerability 2026-07-05 TidGi Desktop 0.13.0 Critical Remote Code Execution Vulnerability Advisory 2026-07-05 Hospital Management System V1.0 SQL Injection Vulnerability in patientlogin.php 2026-07-05

Offline Archive

Offline screenshot & PDF are Pro-exclusive