Kramdown Attribute Parsing Enables HTML Injection in SiYuan

SiYuan v3.8.3 fails to HTML-escape the data-subtype attribute when generating gutter-button markup (app/src/protyle/gutter/button.ts, assigned via innerHTML in app/src/protyle/gutter/index.ts) from content pasted as plain-text Markdown containing a Kramdown inline attribute list (IAL). Because the shared Lute renderer parses Kramdown IAL from text/plain input, an attacker-supplied Markdown snippet using entity-encoded quotes in data-subtype breaks out of the attribute value when the gutter markup is re-parsed by the browser, injecting additional attributes such as autofocus and onfocus. If a victim pastes the crafted Markdown and the affected gutter control receives focus, the injected handler executes; in the Electron desktop application, where the main BrowserWindow enables Node integration and disables context isolation, this results in JavaScript execution with renderer Node.js privileges (remote code execution). Fixed in v3.8.4.

Casky was already ahead

This CVE exploits attack patterns that Casky's 323matched skills already investigate — long before this vulnerability was disclosed. Claude's reasoning model maps these techniques to MITRE ATT&CK, so practitioners who ran these skills have already seen the threat behaviour in their findings.

Analysis

SiYuan v3.8.3 contains a stored cross-site scripting (XSS) vulnerability in its Markdown rendering pipeline. When users paste plain-text Markdown containing Kramdown inline attribute lists (IAL) with entity-encoded quotes, the application fails to properly HTML-escape the data-subtype attribute during gutter button markup generation. This allows attackers to break out of attribute contexts and inject arbitrary HTML/JavaScript code that executes in the victim's browser. The vulnerability affects all users of SiYuan who process untrusted Markdown content, making it particularly dangerous in collaborative note-taking and documentation scenarios where content sharing is common.

Casky's 323 mapped skills enable detection across the full attack chain: Initial Access (TA0001) detection identifies suspicious Markdown payloads with encoded entity sequences targeting the Kramdown parser, while Execution (TA0043) skills recognize the DOM-based XSS patterns when malicious attributes bypass sanitization. Practitioners using Casky would observe findings that correlate parser anomalies—specifically Kramdown IAL processing of entity-encoded attribute values—with subsequent innerHTML operations lacking proper escaping. Extended reasoning across these skills reveals the attack progression: attacker crafts Markdown → Kramdown parser processes IAL without context-aware filtering → innerHTML assignment executes injected code. This multi-stage visibility helps practitioners understand not just that XSS occurred, but the specific rendering pipeline weakness and how to implement attribute-level sanitization defenses.

Live Threat IntelligenceComing soon

Casky Risk Score

—

EPSS Probability

—

Shodan Exposure

—

GreyNoise Signal

—

Composite risk scoring from EPSS, CISA KEV, Shodan, and GreyNoise — 21 security APIs correlated into a single Casky Risk Score. Coming in Casky Pro. Join early access →

323 Casky skills cover this attack pattern

These skills use Claude AI's reasoning model to surface findings in the same attack categories as CVE-2026-100639.

Abuse of Public-Facing API: Mobile API Abuse

mobile security · low

Run

abusing-dpapi-for-credential-access

red teaming · high

Run

abusing-shadow-credentials-for-privesc

red teaming · high

Run

MITRE ATT&CK Techniques

TA0001 TA0043

Investigate the attack patterns behind CVE-2026-100639

Casky has 323 skills that investigate the attack patterns behind CVE-2026-100639. Run one and get CVSS-scored findings in 3 minutes.

Run the skill that detects this →

X Instagram LinkedIn