https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 14:48:43 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-330126 EUVD-2026-330126 https://cve.radiocsirt.org/vuln/euvd-2026-330126 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54759 <p>SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, Lute&#39;s HTML sanitizer does not remove &lt;iframe&gt; elements. Combined with the SiYuan Electron client&#39;s permissive security configuration, an attacker can include a malicious &lt;iframe&gt; in a Bazaar package README that executes arbitrary commands on the victim&#39;s machine when the package details are viewed. No package installation is required. This vulnerability is fixed in 3.7.0.</p> <p>SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, Lute&#39;s HTML sanitizer does not remove &lt;iframe&gt; elements. Combined with the SiYuan Electron client&#39;s permissive security configuration, an attacker can include a malicious &lt;iframe&gt; in a Bazaar package README that executes arbitrary commands on the victim&#39;s machine when the package details are viewed. No package installation is required. This vulnerability is fixed in 3.7.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-54759