SiYuan vulnerabilities
We track 1 vulnerability in SiYuan products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 21, 2026.
1vulnerabilities
1critical
0high
0exploited
9.6average CVSS score
Latest SiYuan vulnerabilities
- 9.6 Critical severity
SiYuan: Improper Neutralization of Input During Web Page Generation
SiYuan before v3.6.1 fails to sanitize package metadata and README content in the Bazaar marketplace, allowing malicious package authors to inject arbitrary HTML and JavaScript. Attackers can achieve remote code execution on any user browsing the Bazaar by emb