CVE-2026-50551

9.9 Critique

Publiée le 25/06/2026 à 00:16 · Modifiée le 25/06/2026 à 16:16 · Analyse NVD reportée · Source : security-advisories@github.com

Description

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, SiYuan contains a stored cross-site scripting (XSS) vulnerability in the Attribute View (database) asset cell renderer that escalates to remote code execution (RCE) in the Electron desktop client. This vulnerability is fixed in 3.7.0.

Traduire en français

Produits concernés

siyuan-note siyuan

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.9 Critique	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-79

Références

https://github.com/siyuan-note/siyuan/security/advisories/GHSA-56mp-4f3v-fgj2
https://github.com/siyuan-note/siyuan/security/advisories/GHSA-56mp-4f3v-fgj2

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories