SiYuan: Electron Renderer RCE via decodeURIComponent-driven tooltip XSS in aria-label sink (incomplete fix for CVE-2026-34585)
Critical severity
GitHub Reviewed
Published
May 5, 2026
in
siyuan-note/siyuan
•
Updated May 15, 2026
Give feedback on Dependabot alerts