https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 15:22:50 +0000 https://vulnerability.circl.lu/vuln/cve-2026-40922 <p><strong>Affected:</strong> siyuan-note siyuan</p> <p>SiYuan is an open-source personal knowledge management system. In versions 3.6.1 through 3.6.3, a prior fix for XSS in bazaar README rendering (incomplete fix for CVE-2026-33066) enabled the Lute HTML sanitizer, but the sanitizer does not block iframe tags, and its URL-prefix blocklist does not effectively filter srcdoc attributes which contain raw HTML rather than URLs. A malicious bazaar package author can include an iframe with a srcdoc attribute containing embedded scripts in their README. When other users view the package in SiYuan&#39;s marketplace UI, the payload executes in the Electron context with full application privileges, enabling arbitrary code execution on the user&#39;s machine. This issue has been fixed in version 3.6.4.</p> <p><strong>Affected:</strong> siyuan-note siyuan</p> <p>SiYuan is an open-source personal knowledge management system. In versions 3.6.1 through 3.6.3, a prior fix for XSS in bazaar README rendering (incomplete fix for CVE-2026-33066) enabled the Lute HTML sanitizer, but the sanitizer does not block iframe tags, and its URL-prefix blocklist does not effectively filter srcdoc attributes which contain raw HTML rather than URLs. A malicious bazaar package author can include an iframe with a srcdoc attribute containing embedded scripts in their README. When other users view the package in SiYuan&#39;s marketplace UI, the payload executes in the Electron context with full application privileges, enabling arbitrary code execution on the user&#39;s machine. This issue has been fixed in version 3.6.4.</p> https://vulnerability.circl.lu/vuln/cve-2026-40922