CVE-2026-41421

SiYuan is an open-source personal knowledge management system. Prior to 3.6.5, SiYuan desktop renders notification messages as raw HTML inside an Electron renderer. The notification route POST /api/notification/pushMsg accepts a user-controlled msg value, forwards it through the backend broadcast layer, and the frontend inserts it into the DOM with insertAdjacentHTML(...) at message.ts. On desktop builds, this is not limited to ordinary XSS. Electron windows are created with nodeIntegration: true, contextIsolation: false, and webSecurity: false at main.js. As a result, JavaScript executed from the notification sink can directly access Node APIs and escalate to desktop code execution. This vulnerability is fixed in 3.6.5.

• CWE-78
• CWE-79

• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-grjj-6f6g-cq8q
• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-grjj-6f6g-cq8q

Published

Apr 24, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-41415PJSIP is a free and open source multimedia communication lib…9.1
• CVE-2026-41416PJSIP is a free and open source multimedia communication lib…7.5
• CVE-2026-41417Netty allows request-line validation to be bypassed when a `…5.3
• CVE-2026-414184ga Boards is a boards system for realtime project managemen…5.3
• CVE-2026-414194ga Boards is a boards system for realtime project managemen…7.6
• CVE-2026-4142The Sentence To SEO (keywords, description and tags) plugin …4.4
• CVE-2026-41422Daptin is a GraphQL/JSON-API headless CMS. Prior to version …8.3
• CVE-2026-41423Angular is a development platform for building mobile and de…5.3
• CVE-2026-41425Authlib is a Python library which builds OAuth and OpenID Co…5.4
• CVE-2026-41426pretalx is a conference planning tool. Prior to 2026.1.0, an…6.1
• CVE-2026-41427Better Auth is an authentication and authorization library f…6.5
• CVE-2026-41428Budibase is an open-source low-code platform. Prior to 3.35.…9.1