A vulnerability marked as problematic has been reported in logseq up to 0.10.15 . Affected is an unknown function of the file package.json . Performing a manipulation of the argument Name results in cross site scripting. This vulnerability is known as CVE-2026-47900 . Remote exploitation of the attack is possible. No exploit is available.