github.com/siyuan-note/siyuan
Go2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting github.com/siyuan-note/siyuanpage 1 of 1
- CVE-2026-32750MEDIUMCVSS 6.8EG 6.82026-03-19
SiYuan is a personal knowledge management system. In versions 3.6.0 and below, POST /api/import/importStdMd passes the localPath parameter directly to model.ImportFromLocalPath with zero path validation. The function recursively reads ever…
- CVE-2026-32940CRITICALCVSS 6.1EG 9.32026-03-20
SiYuan is a personal knowledge management system. In versions 3.6.0 and below, SanitizeSVG has an incomplete blocklist — it blocks data:text/html and data:image/svg+xml in href attributes but misses data:text/xml and data:application/xml…
Check whether github.com/siyuan-note/siyuan is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for github.com/siyuan-note/siyuan CVEs against the assets you own.
Start Free Scan →