Go/github.com/siyuan-note/siyuan/kernel CVE-2026-40107: medium 6.5, EPSS 0.31%

SiYuan Affected by Zero-Click NTLM Hash Theft and Blind SSRF via Mermaid Diagram Rendering

Action: Upgrade github.com/siyuan-note/siyuan/kernel to 0.0.0-20260407035653-2f416e5253f1 or later.

go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260407035653-2f416e5253f1

Affected

Fixed versions

Sources

• osv: GHSA-w95v-4h65-j455
• nvd: CVE-2026-40107
• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-w95v-4h65-j455
• https://github.com/siyuan-note/siyuan

CVE-2026-40107 · published 2026-04-10T19:21:44Z · modified 2026-06-25T23:11:27.622221544Z · JSON