SiYuan

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

SiYuan records in CISA KEV

No SiYuan vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-40756 CVE-2026-56397 · GHSA-v3mg-9v85-fcm7

SiYuan - Remote Code Execution via Malicious Bazaar Package Metadata and README

HIGH 76

SiYuan before v3.6.1 fails to sanitize package metadata and README content in the Bazaar marketplace, allowing malicious package authors to inject arbitrary HTML and JavaScript.

CVSS 4.0CRITICAL 9.4 Network No auth User interaction EPSS 0.00496 Published 2026-06-21 Fixed in 3.6.1 CWE-79

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0