A vulnerability classified as problematic was found in SiYuan up to 3.6.3. Affected is an unknown function of the component Note Handler. The manipulation results in cross site scripting.
This vulnerability is reported as CVE-2026-39846. The attack can be launched remotely. No exploit exists.
Upgrading the affected component is advised.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2026-39846 | SiYuan up to 3.6.3 Note cross site scripting (GHSA-phhp-9rm9-6gr2)
A vulnerability classified as problematic was found in SiYuan up to 3.6.3. Affected is an unknown function of the component Note Handler. The manipulation results in cross site scripting. This vulnerability is reported as CVE-2026-39846.…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR