Threats Tagged 'ghsa-w745-gjg3-r76m'

SiYuan note-taking software versions before 3.8.4 contain a missing authorization vulnerability in the 'siyuan-send-windows' IPC handler within the Electron main process. This flaw allows a renderer connected to a remote kernel to send commands that cause windows from other workspaces to lock repeatedly, resulting in a limited denial of service. There is no observed impact on confidentiality, integrity, or code execution.