Threats tagged 'ghsa-qh5w-p4pr-mhpj'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.4	EPSS 0.5%	CVE-2026-73053siyuan · Cross-site Scripting Critical9.4EPSS 0.5%2026-08-15CVE Database V5CVE-2026-73053 SiYuan versions before v3.7.4 contain a cross-site scripting vulnerability in the unicode2Emoji function that fails to sanitize codepoint branch output. Attackers can craft document icons with hex-encoded markup that executes in the renderer with Node integration enabled, achieving arbitrary code execution on the host system. EPSS 0.5%Vulnerability siyuan-note #ghsa-qh5w-p4pr-mhpj	CVE Database V5	2026-08-15

Page 1 of 1