Threats tagged 'ghsa-5r83-25qj-w6vh'

SiYuan note-taking software versions before 3.8.4 have an authorization omission vulnerability in the siyuan-get IPC handler. This flaw allows remote kernel renderers to access native clipboard data formats such as MathML, Office, and WPS bytes by invoking specific clipboard read commands. Attackers controlling remote renderer content can exploit this to obtain sensitive clipboard contents during user-mediated paste operations. The vulnerability is fixed in version 3.8.4.