SiYuan Note Asset.render DOM-based XSS to RCE via nodeIntegration (CVE-2026-5985)

github.com 2026-07-10查看中文 →

Security AdvisoryCVE-2026-5985CriticalSiYuan

Affected:

SiYuan <3.6.5

Fixed in:

v3.7.1

Referenced CVEs: CVE-2026-59855

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Class and Exam Timetabling System V1.0 Pre-Auth SQL Injection Vulnerability with POC 2026-07-19 SQL Injection in Class and Exam Timetabling System V1.0 /edit_schoolyr.php with PoC 2026-07-19 Reflected XSS Vulnerability in Courier Management System V1.0 2026-07-19 Snap7 TSnap7MicroClient Heap Overflow in opWriteArea() via unbounded PDULength 2026-07-19 MoviePilot File Upload/Auth Bypass/Data Leak Vulnerabilities (CVE-Not Listed) 2026-07-19

Offline Archive

Offline screenshot & PDF are Pro-exclusive