CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-56397 — SiYuan before v3.6.1 fails to sanitize package metadata and README content in th...

·Source: NIST NVD

Updated:

Executive Summary

SiYuan before v3.6.1 fails to sanitize package metadata and README content in the Bazaar marketplace, allowing malicious package authors to inject arbitrary HTML and JavaScript. Attackers can achieve remote code execution on any user browsing the Bazaar by embedding XSS payloads in package displayName, description, or README fields, exploiting Electron's nodeIntegration setting to execute OS comma

Analysis

SiYuan before v3.6.1 fails to sanitize package metadata and README content in the Bazaar marketplace, allowing malicious package authors to inject arbitrary HTML and JavaScript. Attackers can achieve remote code execution on any user browsing the Bazaar by embedding XSS payloads in package displayName, description, or README fields, exploiting Electron's nodeIntegration setting to execute OS commands. CVSS Score: 9.6. Published: 2026-06-21T14:16:26.783.

Indicators of Compromise (1)

CVE (1)
CVE-2026-56397
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jun 21, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-56271 — Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded ...

Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded default JWT secrets ('auth_token', 'refresh_token') and default audience and issuer values ('AUDIENCE', 'ISSUER') in the enterprise passport authentication middleware (packages/server/src/enterprise/middleware/passport/index.ts). When the corresponding environment variables (JWT_AUTH_TOKEN_SECRET, JWT_REFRESH_TOKEN_SEC

CVE-2026-56271
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-56260 — Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Dock...

Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server's /screenshot and /pdf endpoints. The output_path parameter accepts arbitrary filesystem paths without validation, allowing an attacker to supply absolute or path-traversal values to write to any location writable by the application's user, overwriting server files and causing denial of service.

CVE-2026-56260
NIST NVD
LOWVulnerability

Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)

[object Object]

CVE-2026-40639
r/blueteamsec