https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 03:55:33 +0000 https://cve.radiocsirt.org/vuln/cve-2026-31807 <p><strong>Affected:</strong> siyuan-note siyuan</p> <p>SiYuan is a personal knowledge management system. Prior to 3.5.10, SiYuan&#39;s SVG sanitizer (SanitizeSVG) blocks dangerous elements (&lt;script&gt;, &lt;iframe&gt;, &lt;foreignobject&gt;) and removes on* event handlers and javascript: in href attributes. However, it does NOT block SVG animation elements (&lt;animate&gt;, &lt;set&gt;) which can dynamically set attributes to dangerous values at runtime, bypassing the static sanitization. This allows an attacker to inject executable JavaScript into the unauthenticated /api/icon/getDynamicIcon endpoint (type=8), creating a reflected XSS. This is a bypass of the fix for CVE-2026-29183 (fixed in v3.5.9). This vulnerability is fixed in v3.5.10.</p> <p><strong>Affected:</strong> siyuan-note siyuan</p> <p>SiYuan is a personal knowledge management system. Prior to 3.5.10, SiYuan&#39;s SVG sanitizer (SanitizeSVG) blocks dangerous elements (&lt;script&gt;, &lt;iframe&gt;, &lt;foreignobject&gt;) and removes on* event handlers and javascript: in href attributes. However, it does NOT block SVG animation elements (&lt;animate&gt;, &lt;set&gt;) which can dynamically set attributes to dangerous values at runtime, bypassing the static sanitization. This allows an attacker to inject executable JavaScript into the unauthenticated /api/icon/getDynamicIcon endpoint (type=8), creating a reflected XSS. This is a bypass of the fix for CVE-2026-29183 (fixed in v3.5.9). This vulnerability is fixed in v3.5.10.</p> https://cve.radiocsirt.org/vuln/cve-2026-31807