Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-50551
9.9
CRITICALCVSS v3
Published
June 24, 2026
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, SiYuan contains a stored cross-site scripting (XSS) vulnerability in the Attribute View (database) asset cell renderer that escalates to remote code execution (RCE) in the Electron desktop client. This vulnerability is fixed in 3.7.0.
siyuan-note/siyuan
GitHubA privacy-first, self-hosted, fully open source personal knowledge management software, written in typescript and golang.
GitHubA privacy-first, self-hosted, fully open source personal knowledge management software, written in typescript and golang.NVD