{"uuid": "4c3f987d-eed9-4c48-8713-d8f2ae648657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93922", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mw3ghfnwbx2e", "content": "CVE-2026-93922: stored XSS in SiYuan up to 3.8.4, notebook names rendered raw in Daily Note picker. JS runs in Electron with Node access - leads to OS command execution. CVSS 8.8, no patch yet. Update or restrict untrusted https://www.valtersit.com/cve/CVE-2026-93922/ #CVE #infosec #SiYuan", "creation_timestamp": "2026-09-22T04:50:24.268236Z"}