tocsin

CVE-2026-65607

2 advisories.

Go/github.com/siyuan-note/siyuan/kernel CVE-2026-65607: medium 6.5, EPSS 0.59%

SiYuan: path traversal via /export/temp/ short-circuit branch (incomplete fix for the export-disclosure hardening, GHSA-6865-qjcf-286f)

Action: Upgrade github.com/siyuan-note/siyuan/kernel to 0.0.0-20260510110132-b763d787d1f2 or later.

go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260510110132-b763d787d1f2

Affected

introducedfixedlast affected
0--

Fixed versions

0.0.0-20260510110132-b763d787d1f2

Sources

CVE-2026-65607 · published · modified · JSON

Go/github.com/siyuan-note/siyuan/kernel CVE-2026-65607: unknown, EPSS 0.59%

SiYuan: path traversal via /export/temp/ short-circuit branch (incomplete fix for the export-disclosure hardening, GHSA-6865-qjcf-286f) in github.com/siyuan-note/siyuan/kernel

Action: Upgrade github.com/siyuan-note/siyuan/kernel to 0.0.0-20260510110132-b763d787d1f2 or later.

go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260510110132-b763d787d1f2

Affected

introducedfixedlast affected
0--

Fixed versions

0.0.0-20260510110132-b763d787d1f2

Sources

CVE-2026-65607 · published · modified · JSON