Lucene search
+L

2 matches found

OSV
OSV
added 2026/03/26 8:32 p.m.11 views

GO-2026-4705 SiYuan globalCopyFiles: incomplete sensitive path blocklist allows reading /proc and Docker secrets in github.com/siyuan-note/siyuan/kernel

SiYuan globalCopyFiles: incomplete sensitive path blocklist allows reading /proc and Docker secrets in github.com/siyuan-note/siyuan/kernel...

6.8CVSS5.8AI score0.00411EPSS
SaveExploits1References4
OSV
OSV
added 2026/03/12 8:57 p.m.13 views

GO-2026-4669 SiYuan has a SVG Sanitizer Bypass via Whitespace in `javascript:` URI — Unauthenticated XSS in github.com/siyuan-note/siyuan/kernel

SiYuan has a SVG Sanitizer Bypass via Whitespace in javascript: URI — Unauthenticated XSS in github.com/siyuan-note/siyuan/kernel...

6.4CVSS5.8AI score0.00505EPSS
SaveExploits1References3
Rows per page
Query Builder