CVE-2026-84803 | siyuan-note SiYuan up to 3.8.1 Asset Serving cross site scripting

September 2, 2026 Yanac

A vulnerability was found in siyuan-note SiYuan up to 3.8.1. It has been classified as problematic. Affected is an unknown function of the component Asset Serving. Performing a manipulation results in cross site scripting.

This vulnerability is reported as CVE-2026-84803. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More