{"uuid": "8dbb4b2c-eab5-4551-84a0-a0618114c253", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93922", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117312888659718783", "content": "CVE-2026-93922: stored XSS in SiYuan up to 3.8.4, notebook names rendered raw in Daily Note picker. JS runs in Electron with Node access - leads to OS command execution. CVSS 8.8, no patch yet. Update or restrict untrusted https://www.valtersit.com/cve/CVE-2026-93922/ #CVE #infosec #SiYuan", "creation_timestamp": "2026-09-22T04:50:23.913827Z"}