EUVD-2026-17685
GHSA-ff66-236v-p4fg
Severity by source
AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Primary rating from GitHub Advisory.
CVSS VectorGitHub Advisory
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionGitHub Advisory
SiYuan is a personal knowledge management system. Prior to version 3.6.2, a vulnerability allows crafted block attribute values to bypass server-side attribute escaping when an HTML entity is mixed with raw special characters. An attacker can embed a malicious IAL value inside a .sy document, package it as a .sy.zip, and have the victim import it through the normal Import -> SiYuan .sy.zip workflow. Once the note is opened, the malicious attribute breaks out of its original HTML context and injects an event handler, resulting in stored XSS. In the Electron desktop client, this XSS reaches remote code execution because injected JavaScript runs with access to Node/Electron APIs. This issue has been patched in version 3.6.2.
AnalysisAI
Stored cross-site scripting (XSS) in SiYuan personal knowledge management system versions prior to 3.6.2 escalates to remote code execution in the Electron desktop client. Attackers craft malicious .sy.zip import files containing HTML entities mixed with raw special characters that bypass server-side attribute escaping, injecting event handlers into imported notes. When victims open the compromised note in the Electron client, injected JavaScript executes with full Node/Electron API access, enabling arbitrary code execution. CVSS 8.6 (High) with local attack vector requiring user interaction; no public exploit identified at time of analysis.
Technical ContextAI
SiYuan is an Electron-based personal knowledge management application that stores notes with block-level attributes (IAL - Inline Attribute Lists) in .sy document format. The vulnerability (CWE-79: Improper Neutralization of Input During Web Page Generation) exists in the attribute escaping mechanism that processes IAL values during document import. When an attacker mixes HTML entities with unescaped special characters in block attributes, the parser fails to properly sanitize the combined input, allowing breakout from the intended HTML context. In standard web contexts, this would result in conventional XSS, but SiYuan's Electron architecture significantly amplifies impact. Electron applications bundle Chromium with Node.js runtime, and when nodeIntegration or similar context isolation weaknesses exist, JavaScript executed in the renderer process can invoke require() to access Node.js APIs, file system operations, and child process spawning capabilities. This architectural characteristic transforms what would normally be a data exfiltration or UI manipulation attack into full remote code execution on the victim's workstation.
RemediationAI
Upgrade immediately to SiYuan version 3.6.2 or later, released by the vendor to address this vulnerability. The patch implements proper escaping of block attribute values to prevent HTML entity/special character mixing attacks. Users should obtain the patched release from the official GitHub repository at https://github.com/siyuan-note/siyuan/releases/tag/v3.6.2. As an interim risk reduction measure until patching is complete, organizations should instruct users to avoid importing .sy.zip files from untrusted sources and implement email/download filtering to block suspicious SiYuan archive files. However, these workarounds provide limited protection given the legitimate use case for importing knowledge base content, making version upgrade the only reliable remediation. Verify successful patch application by confirming version 3.6.2 or higher in the application's About dialog. Review previously imported documents from external sources for signs of compromise, though detection of successfully injected payloads may require manual code review of .sy files.
A SQL injection vulnerability was discovered in Siyuan 3.1.11 in /getHistoryItems. Rated critical severity (CVSS 9.8), t
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the ids array parameter in /batchGetBlockAttrs. R
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent. Rated criti
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory. Rated c
SiYuan personal knowledge management system prior to 3.5.4 has a stored XSS vulnerability (CVSS 9.6) that allows code ex
Origin-validation bypass in SiYuan Note (open-source personal knowledge management) before 3.7.0 lets any installed Chro
Reflected XSS in SiYuan knowledge management before 3.5.9.
SiYuan knowledge management system prior to 3.5.5 has a path traversal in /api/file/copyFile allowing arbitrary file ope
SiYuan version 3.0.3 allows executing arbitrary commands on the server. Rated critical severity (CVSS 9.0), this vulnera
SQL injection in SiYuan prior to version 3.6.0 allows any authenticated user, including those with read-only access, to
Cross-site scripting (XSS) in SiYuan personal knowledge management system versions 3.6.0-3.6.1 allows remote attackers t
Arbitrary file disclosure in SiYuan personal knowledge management system before 3.7.0 lets an unauthenticated remote att
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allVendor StatusVendor
SUSE
Severity: Important| Product | Status |
|---|---|
| SUSE Linux Enterprise Server 16.1 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP5 | Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP6 | Affected |
| openSUSE Leap 15.5 | Affected |
| openSUSE Leap 15.6 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today