Go/github.com/siyuan-note/siyuan/kernel CVE-2026-82651: medium 4.9, EPSS 0.48%

SiYuan: /history/*path and /repo/diff/*path potentially exposing historical snapshots of data/.siyuan/publishAccess.json and data/templates/*

Action: Upgrade github.com/siyuan-note/siyuan/kernel to 0.0.0-20260816034002-035bf9a8c311 or later.

go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260816034002-035bf9a8c311

Affected

Fixed versions

Sources

• osv: GHSA-3cm4-ccvw-6xr6
• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-3cm4-ccvw-6xr6
• https://github.com/siyuan-note/siyuan/commit/035bf9a8c311c6f8468f2f1054b4d5e1711787e2
• https://github.com/siyuan-note/siyuan
• https://github.com/siyuan-note/siyuan/releases/tag/v3.8.1

CVE-2026-82651 · published 2026-10-05T17:32:44Z · modified 2026-10-07T17:55:31.429031793Z · JSON