https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T01:41:31.707974+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-73041 CVE-2026-73041 — SiYuan before v3.7.4 Remote Code Execution via PDF Annotations 2026-10-07T01:41:31.724303+00:00

Affected: siyuan-note siyuan

SiYuan versions before v3.7.4 fail to validate or escape annotation fields written to disk by the setFileAnnotation endpoint. Attackers can inject malicious markup into annotation fields that execute as script in the PDF renderer with full Node.js access when a user opens an annotated PDF.