CVE-2026-40922

SiYuan is an open-source personal knowledge management system. In versions 3.6.1 through 3.6.3, a prior fix for XSS in bazaar README rendering (incomplete fix for CVE-2026-33066) enabled the Lute HTML sanitizer, but the sanitizer does not block iframe tags, and its URL-prefix blocklist does not effectively filter srcdoc attributes which contain raw HTML rather than URLs. A malicious bazaar package author can include an iframe with a srcdoc attribute containing embedded scripts in their README. When other users view the package in SiYuan's marketplace UI, the payload executes in the Electron context with full application privileges, enabling arbitrary code execution on the user's machine. This issue has been fixed in version 3.6.4.

• CWE-79

• https://github.com/advisories/GHSA-4663-4mpg-879vThird Party Advisory
• https://github.com/siyuan-note/siyuan/commit/b382f50e1880ed996364509de5a10a72d7409428Patch
• https://github.com/siyuan-note/siyuan/releases/tag/v3.6.4Release Notes
• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-8q5w-mmxf-48jgExploit, Third Party Advisory
• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-8q5w-mmxf-48jgExploit, Third Party Advisory

Published

Apr 17, 2026

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-40916A flaw was found in GIMP. A stack buffer overflow vulnerabil…5.5
• CVE-2026-40917A flaw was found in GIMP. This vulnerability, a heap buffer …7.1
• CVE-2026-40918A flaw was found in GIMP. Processing a specially crafted PVR…5.5
• CVE-2026-40919A flaw was found in GIMP. This vulnerability, a buffer overf…5.5
• CVE-2026-4092Path Traversal in Clasp impacting versions < 3.2.0 allows a …8.8
• CVE-2026-40920Privilege Escalation via URL Parameter is reported in Apache…9.8
• CVE-2026-40923Tekton Pipelines project provides k8s-style resources for de…5.4
• CVE-2026-40924Tekton Pipelines project provides k8s-style resources for de…6.5
• CVE-2026-40925WWBN AVideo is an open source video platform. In versions 29…8.3
• CVE-2026-40926WWBN AVideo is an open source video platform. In versions 29…7.1
• CVE-2026-40927Docmost is open-source collaborative wiki and documentation …5.4
• CVE-2026-40928WWBN AVideo is an open source video platform. In versions 29…5.4