https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 01:14:56 +0000 https://cve.radiocsirt.org/vuln/cve-2026-73042 <p><strong>Affected:</strong> siyuan-note siyuan</p> <p>SiYuan before v3.7.4 fails to properly escape database menu metadata in HTML interpolation, allowing stored values to execute script when users open group, view, or field-edit menus. Attackers can inject markup through field descriptions or names that close containing elements and execute arbitrary code via event handlers, reaching Node built-ins due to Electron&#39;s insecure configuration.</p> <p><strong>Affected:</strong> siyuan-note siyuan</p> <p>SiYuan before v3.7.4 fails to properly escape database menu metadata in HTML interpolation, allowing stored values to execute script when users open group, view, or field-edit menus. Attackers can inject markup through field descriptions or names that close containing elements and execute arbitrary code via event handlers, reaching Node built-ins due to Electron&#39;s insecure configuration.</p> https://cve.radiocsirt.org/vuln/cve-2026-73042