Siyang Wu

electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-name allowlist or sender validation. Renderer-side script execution can invoke openFileWithEditor and other functions with arbitrary arguments to execute system commands in the main process.

SiYuan before 3.8.2 trusts the attacker-writable text/siyuan clipboard MIME type and skips sanitization in the paste handler, allowing code execution in the Node-enabled desktop renderer. Attackers can craft malicious web pages that write to the clipboard, and when pasted into SiYuan, injected scripts execute with full Node.js access through the Electron main process.

ILIAS versions before 9.23, 10.11, and 11.4 contain an authorization bypass vulnerability in ilObjGroupGUI where saveMapSettingsObject() and updateGroupTypeObject() perform state-changing operations without write permission checks. Authenticated users with only read access to a group can craft POST requests to modify group map settings and didactic template assignments, changing group modes and permissions for all members.

**Nome do Software Vulnerável e Versões Afetadas** apache-airflow-providers-git versões anteriores a 0.4.1 **Description** O provedor Git do Apache Airflow executa operações git-over-SSH com `StrictHostKeyChecking=no` por padrão, desativando a verificação de chave de host SSH. Isso permite que um invasor capaz de interceptar o caminho da rede entre um worker do Airflow e o servidor Git realize um ataque de man-in-the-middle. Tal ataque pode levar à captura da chave de implantação SSH ou à injeção de conteúdo malicioso no repositório. O problema afeta implantações que utilizam o Git DAG bundle ou o provedor Git para clonar via SSH com uma chave de implantação. **Recommendations** Atualize para a versão 0.4.1 ou posterior do apache-airflow-providers-git e configure um arquivo `known hosts`.