Skip to content

SiYuan Has a Stored Cross-Site Scripting (XSS) Vulnerability via Unrestricted SVG File Upload

Moderate severity GitHub Reviewed Published Jan 16, 2026 in siyuan-note/siyuan • Updated Jan 16, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts