EUVD-2026-83459
GHSA-qvp6-cjg5-8753
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-deliverable via crafted notebook (PR:N) but requires victim to open/render content (UI:R); Electron renderer with full system access breaks out of the app to the OS, so S:C with full C/I/A:H.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
4DescriptionCVE.org
SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark dock HTML, allowing stored cross-site scripting. Attackers can supply crafted notebooks or call administrative endpoints to inject malicious style values that execute in the Electron renderer with full system access.
AnalysisAI
Stored cross-site scripting in SiYuan through 3.8.4 lets an attacker inject malicious style values into heading attributes that the outline and bookmark docks render without escaping, so the payload executes as JavaScript inside SiYuan's Electron renderer - which runs with full system access, making this effectively an XSS-to-code-execution condition on the host rather than ordinary script execution in a sandboxed browser context. Delivery is either a crafted notebook that the victim imports or opens, or abuse of SiYuan's administrative endpoints (the latter implying authenticated access); the payload only fires when the victim surfaces the affected heading in the outline or bookmark dock, so user interaction is required (UI:A) and exploitation is not purely passive. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to inject a crafted heading style attribute either by supplying a malicious SiYuan notebook that the victim imports/opens, or by calling SiYuan's administrative endpoints (the latter implying authenticated access). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuine high-priority issue whose real-world impact exceeds a typical stored-XSS finding because the payload executes in SiYuan's Electron renderer 'with full system access' - meaning the flaw is effectively a client-side XSS-to-RCE, not just script execution in a sandboxed browser context. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch identified at time of analysis, so remediation must start with tracking the upstream GitHub advisory GHSA-928g-4hfq-qwvx (https://github.com/siyuan-note/siyuan/security/advisories/GHSA-928g-4hfq-qwvx) and the SiYuan release channel for a fixed build above 3.8.4 before upgrading. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all SiYuan installations and confirm which hosts run version 3.8.4 or earlier, then immediately instruct users to stop importing or opening notebooks from external, untrusted, or unsolicited sources and to treat any inbound .sy notebook package as potentially hostile; where SiYuan is not business-critical, suspend its use on endpoints with access to sensitive data, and where it must remain in service, isolate those endpoints from shared repositories and high-value network segments. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
SQL injection in SiYuan personal knowledge management (versions <= v3.7.2) lets attackers pass arbitrary SQL statements
SQL injection in SiYuan personal knowledge-management software (all versions before v3.7.3) lets attackers inject arbitr
A SQL injection vulnerability was discovered in Siyuan 3.1.11 in /getHistoryItems. Rated critical severity (CVSS 9.8), t
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the ids array parameter in /batchGetBlockAttrs. R
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent. Rated criti
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory. Rated c
SiYuan personal knowledge management system prior to 3.5.4 has a stored XSS vulnerability (CVSS 9.6) that allows code ex
Origin-validation bypass in SiYuan Note (open-source personal knowledge management) before 3.7.0 lets any installed Chro
Reflected XSS in SiYuan knowledge management before 3.5.9.
SiYuan knowledge management system prior to 3.5.5 has a path traversal in /api/file/copyFile allowing arbitrary file ope
SiYuan version 3.0.3 allows executing arbitrary commands on the server. Rated critical severity (CVSS 9.0), this vulnera
SQL injection in SiYuan prior to version 3.6.0 allows any authenticated user, including those with read-only access, to
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today