CVE-2026-73608
2 advisories.
Go/github.com/siyuan-note/siyuan/kernel CVE-2026-73608: high 8.6, EPSS 0.30%
SiYuan: getAttributeViewSearchTarget returns database row content to anonymous readers with no publish-access check, reopening the class closed one day earlier at the adjacent route
Action: Upgrade github.com/siyuan-note/siyuan/kernel to 0.0.0-20260812083335-251596fc0de2 or later.
go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260812083335-251596fc0de2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-20260726161145-9b8e8956f997 | 0.0.0-20260812083335-251596fc0de2 | - |
Fixed versions
| 0.0.0-20260812083335-251596fc0de2 |
Sources
- osv: GHSA-9cqf-hhrq-7v45
- https://github.com/siyuan-note/siyuan/security/advisories/GHSA-9cqf-hhrq-7v45
- https://github.com/siyuan-note/siyuan/commit/9b8e8956f997d6452d40aff4159d58f3283a98a4
- https://github.com/siyuan-note/siyuan
- https://github.com/siyuan-note/siyuan/releases/tag/v3.8.0
CVE-2026-73608 · published · modified · JSON
Go/github.com/siyuan-note/siyuan/kernel CVE-2026-73608: unknown, EPSS 0.30%
SiYuan: getAttributeViewSearchTarget returns database row content to anonymous readers with no publish-access check, reopening the class closed one day earlier at the adjacent route in github.com/siyu
Action: Upgrade github.com/siyuan-note/siyuan/kernel to 0.0.0-20260812083335-251596fc0de2 or later.
go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260812083335-251596fc0de2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-20260726161145-9b8e8956f997 | 0.0.0-20260812083335-251596fc0de2 | - |
Fixed versions
| 0.0.0-20260812083335-251596fc0de2 |
Sources
- osv: GO-2026-6632
- https://github.com/siyuan-note/siyuan/security/advisories/GHSA-9cqf-hhrq-7v45
- https://github.com/siyuan-note/siyuan/commit/9b8e8956f997d6452d40aff4159d58f3283a98a4
- https://github.com/siyuan-note/siyuan/releases/tag/v3.8.0
CVE-2026-73608 · published · modified · JSON