Skip to content
Threat Feed

Product

Github.com/Siyuan-Note/Siyuan/Kernel (<= 0.0.0-20260421031503-96dfe0bea474)

1 brief RSS
critical threat

SiYuan Bazaar Marketplace Stored XSS Leads to Electron RCE

SiYuan's Bazaar marketplace is vulnerable to stored cross-site scripting (XSS) via unescaped package metadata, leading to arbitrary OS command execution in the desktop Electron client.

github.com/siyuan-note/siyuan/kernel xss rce electron siyuan
2r 1t