CVE-2026-82654 | siyuan-note SiYuan up to 3.8.0 Rendering Hint/Backlink/Breadcrumb Rendering Functions block name/alias/memo cross site scripting

A vulnerability identified as problematic has been detected in siyuan-note SiYuan up to 3.8.0. The affected element is the function Hint/Backlink/Breadcrumb Rendering Functions of the component Rendering. Performing a manipulation of the argument block name/alias/memo results in cross site scripting.

This vulnerability is identified as CVE-2026-82654. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More