A vulnerability was found in siyuan-note siyuan up to 3.5.4-dev1. It has been declared as problematic. This affects an unknown part of the component SVG File Handler. Executing a manipulation can lead to cross site scripting.
This vulnerability is tracked as CVE-2026-23645. The attack can be launched remotely. No exploit exists.
It is recommended to upgrade the affected component.
