VendorsB3logsiyuanany version
Vulnerabilities

B3log SiYuan any version

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

43CVEs
CVE-2026-23847
SiYuan Vulnerable to Reflected Cross-Site Scripting (XSS) via /api/icon/getDynamicIcon
Published 2026-01-19 · Analyzed
6.1EPSS 0.003
CVE-2026-23645
SiYuan Vulnerable to Stored Cross-Site Scripting (XSS) via Unrestricted SVG File Upload
Published 2026-01-16 · Analyzed
6.1EPSS 0.003
CVE-2026-40922
SiYuan: Incomplete sanitization of bazaar README allows stored XSS via iframe srcdoc (incomplete fix for CVE-2026-33066)
Published 2026-04-16 · Modified
5.4EPSS 0.003
← Prev2 / 2