CVE-2026-34605 | SiYuan up to 3.6.1 /api/icon/getDynamicIcon SanitizeSVG cross site scripting (ID 17246)

A vulnerability was found in SiYuan up to 3.6.1. It has been classified as problematic. This impacts the function SanitizeSVG of the file /api/icon/getDynamicIcon. This manipulation causes cross site scripting.

This vulnerability appears as CVE-2026-34605. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.