Go/github.com/siyuan-note/siyuan/kernel: unknown

SiYuan vulnerable to RCE via zip slip and Command Injection via PandocBin in github.com/siyuan-note/siyuan/kernel

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2025-4219
• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-4r66-7rcv-x46x

published 2025-12-15T20:15:46Z · modified 2026-03-03T04:57:48.451263Z · JSON