This is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is.
Post
OffSequence
offseq.bsky.social
did:plc:t5t6qep2vfipbi7f54demwev
SiYuan (pre-v3.7.4) hit by CRITICAL XSS (CVE-2026-73053). Crafted icons can execute code if Node integration is enabled. Patch status unclear — disable Node integration to reduce risk. https://radar.offseq.com/threat/cve-2026-73053-improper-neutralization-of-input-during-web-page-generation-cross...
https://radar.offseq.com/threat/cve-2026-73053-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-1654398c24cf93d4
2026-08-16T03:00:25.975Z