CVE-2026-45375

🗓️ 14 May 2026 18:13:12Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 32 Views🌐 WEB

CVE-2026-45375: SiYuan Bazaar renders unescaped package name and version, enabling XSS pre-3.7.0.

Reporter	Title	Published	Views	Family All 17
Circl	CVE-2026-45375	10 May 202615:32	–	circl
CNNVD	SiYuan 跨站脚本漏洞	14 May 202600:00	–	cnnvd
CVE	CVE-2026-55570	24 Jun 202621:24	–	cve
Cvelist	CVE-2026-45375 SiYuan: Bazaar marketplace renders unescaped package `name` and `version` metadata, allowing stored XSS and Electron code execution	14 May 202618:13	–	cvelist
EUVD	EUVD-2026-30356	14 May 202618:13	–	euvd
Github Security Blog	SiYuan Bazaar marketplace renders unescaped package `name` and `version` metadata, allowing stored XSS and Electron code execution	13 May 202615:33	–	github
NVD	CVE-2026-45375	14 May 202619:16	–	nvd
OSV	GHSA-27QC-M5GF-JV5R SiYuan Bazaar marketplace renders unescaped package `name` and `version` metadata, allowing stored XSS and Electron code execution	13 May 202615:33	–	osv
OSV	GO-2026-5001 SiYuan Bazaar marketplace renders unescaped package `name` and `version` metadata, allowing stored XSS and Electron code execution in github.com/siyuan-note/siyuan/kernel	20 May 202619:07	–	osv
OSV	OPENSUSE-SU-2026:21483-1 Security update for govulncheck-vulndb	30 Jul 202609:09	–	osv

[
  {
    "vendor": "siyuan-note",
    "product": "siyuan",
    "versions": [
      {
        "version": "<= 3.6.5",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/siyuan-note/siyuan/security/advisories/GHSA-27qc-m5gf-jv5r

Parameter	Position	Path	Description	CWE
name	nested	kernel/bazaar/package.go	Vulnerability arises from HTML-escaping gap allowing unescaped name and version to be rendered via innerHTML in the marketplace UI.	CWE-79, CWE-116
version	nested	kernel/bazaar/package.go	Vulnerability arises from HTML-escaping gap allowing unescaped name and version to be rendered via innerHTML in the marketplace UI.	CWE-79, CWE-116
preferredName	nested	kernel/bazaar/package.go	Vulnerability arises from HTML-escaping gap allowing unescaped name and version to be rendered via innerHTML in the marketplace UI.	CWE-79, CWE-116
data.name	nested	kernel/bazaar/package.go	Vulnerability arises from HTML-escaping gap allowing unescaped name and version to be rendered via innerHTML in the marketplace UI.	CWE-79, CWE-116
data.version	nested	kernel/bazaar/package.go	Vulnerability arises from HTML-escaping gap allowing unescaped name and version to be rendered via innerHTML in the marketplace UI.	CWE-79, CWE-116
name	nested	app/src/config/bazaar.ts	Frontend rendering of plugin/theme data into HTML template strings enables injection when name/version contain HTML/JS.	CWE-79, CWE-116
version	nested	app/src/config/bazaar.ts	Frontend rendering of plugin/theme data into HTML template strings enables injection when name/version contain HTML/JS.	CWE-79, CWE-116
preferredName	nested	app/src/config/bazaar.ts	Frontend rendering of plugin/theme data into HTML template strings enables injection when name/version contain HTML/JS.	CWE-79, CWE-116
data.name	nested	app/src/config/bazaar.ts	Frontend rendering of plugin/theme data into HTML template strings enables injection when name/version contain HTML/JS.	CWE-79, CWE-116
data.version	nested	app/src/config/bazaar.ts	Frontend rendering of plugin/theme data into HTML template strings enables injection when name/version contain HTML/JS.	CWE-79, CWE-116

17 Jun 2026 10:51Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.19

EPSS0.00317

SSVC