Lucene search
+L

1 matches found

OSV
OSV
added 2026/06/25 6:43 p.m.7 views

GO-2026-5201 SiYuan vulnerable to reflected XSS via SVG namespace prefix bypass in SanitizeSVG (getDynamicIcon, unauthenticated) in github.com/siyuan-note/siyuan/kernel

SiYuan vulnerable to reflected XSS via SVG namespace prefix bypass in SanitizeSVG getDynamicIcon, unauthenticated in github.com/siyuan-note/siyuan/kernel...

8.6CVSS5.8AI score0.00469EPSS
SaveExploits1References4
Rows per page
Query Builder