Critical Cross-Site Scripting Vulnerability in SiYuan Note-taking App
A critical cross-site scripting (XSS) vulnerability, CVE-2026-74902, has been discovered in SiYuan, a popular note-taking application, affecting versions prior to 3.7.4. This vulnerability allows attackers to craft malicious filenames that can execute with full OS command access when a user interacts with the file. Immediate action is required to update to a patched version.