EUVD-2026-125172

SiYuan before 3.8.10 contains a server-side request forgery vulnerability in the skill-install download path because fetchBytes performs only a parse-time hostname check instead of using ssrfSafeClient. Attackers can supply a skill URL via the MCP skill install action that redirects or DNS-rebind...

CVE-2026-126393

SiYuan versions prior to 3.8.10 are vulnerable to a Server-Side Request Forgery (SSRF) in the skill-install download path . The root cause is that the fetchBytes function performs only a parse-time hostname check instead of utilizing ssrfSafeClient . An attacker can provide a skill URL via the MC...

PT-2026-146679

SiYuan before 3.8.10 contains a server-side request forgery vulnerability in the skill-install download path because fetchBytes performs only a parse-time hostname check instead of using ssrfSafeClient. Attackers can supply a skill URL via the MCP skill install action that redirects or DNS-rebind...