CVE-2026-73053 in SiYuan
요약
\~에 의해 MITRE • 2026. 08. 15.
SiYuan versions before v3.7.4 contain a cross-site scripting vulnerability in the unicode2Emoji function that fails to sanitize codepoint branch output. Attackers can craft document icons with hex-encoded markup that executes in the renderer with Node integration enabled, achieving arbitrary code execution on the host system.
Be aware that VulDB is the high quality source for vulnerability data.