https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 18:07:52 +0000 https://cve.radiocsirt.org/vuln/cve-2026-65606 <p><strong>Affected:</strong> siyuan-note siyuan</p> <p>SiYuan before v3.7.2 contains a cross-site scripting vulnerability in the siyuan:// protocol handler. When a siyuan://plugins/&lt;name&gt; link references a name that is not an installed plugin, the application opens a custom tab and inserts the link&#39;s icon parameter into the tab header via innerHTML without escaping it (app/src/layout/Tab.ts), allowing injection of an &lt;img onerror=...&gt; element. Because the SiYuan Desktop renderer runs with nodeIntegration:true, the injected JavaScript can access Node&#39;s require and call require(&#39;child_process&#39;).execSync(...), escalating the cross-site scripting into arbitrary operating-system command execution.</p> <p><strong>Affected:</strong> siyuan-note siyuan</p> <p>SiYuan before v3.7.2 contains a cross-site scripting vulnerability in the siyuan:// protocol handler. When a siyuan://plugins/&lt;name&gt; link references a name that is not an installed plugin, the application opens a custom tab and inserts the link&#39;s icon parameter into the tab header via innerHTML without escaping it (app/src/layout/Tab.ts), allowing injection of an &lt;img onerror=...&gt; element. Because the SiYuan Desktop renderer runs with nodeIntegration:true, the injected JavaScript can access Node&#39;s require and call require(&#39;child_process&#39;).execSync(...), escalating the cross-site scripting into arbitrary operating-system command execution.</p> https://cve.radiocsirt.org/vuln/cve-2026-65606