CVE-2026-23851: Improper Limitation of a Pathname to a Restricted Directory

SiYuan is a personal knowledge management system. Versions prior to 3.5.4 contain a logic vulnerability in the /api/file/globalCopyFiles endpoint. The function allows authenticated users to copy files from any location on the server's filesystem into the application's workspace without proper pat...

PT-2022-24949 · Unknown · Lanyulei Ferry

Name of the Vulnerable Software and Affected Versions: lanyulei ferry affected versions not specified Description: A critical issue has been found in lanyulei ferry, affecting some unknown functionality of the file apis/public/file.go of the component API. The manipulation of the file argument...