CVE-2026-45375

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, SiYuan's Bazaar community marketplace renders the name and version fields of a package's plugin.json and the equivalent theme.json / template.json / widget.json / icon.json into the Settings → Marketplace UI without HT...

CVE-2026-45375

creationtimestamp| type| source ---|---|--- 2026-05-10 15:32:12+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-27qc-m5gf-jv5r 2026-06-25 01:39:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3cbffawf2p...