{"action":"Upgrade github.com/siyuan-note/siyuan/kernel to 0.0.0-20260816034002-035bf9a8c311 or later.","affected":[{"introduced":"0"}],"component":"github.com/siyuan-note/siyuan/kernel","cve_ids":["CVE-2026-82651"],"ecosystem":"Go","epss":0.00477,"exploited":false,"fixed_versions":["0.0.0-20260816034002-035bf9a8c311"],"ghsa_id":"GHSA-3cm4-ccvw-6xr6","id":"tcs_01M5KETMSHTV96A2KJ5B6MNKVD","modified_at":"2026-10-07T17:55:31.429031793Z","published_at":"2026-10-05T17:32:44Z","references":["https://osv.dev/vulnerability/GHSA-3cm4-ccvw-6xr6","https://github.com/siyuan-note/siyuan/security/advisories/GHSA-3cm4-ccvw-6xr6","https://github.com/siyuan-note/siyuan/commit/035bf9a8c311c6f8468f2f1054b4d5e1711787e2","https://github.com/siyuan-note/siyuan","https://github.com/siyuan-note/siyuan/releases/tag/v3.8.1"],"severity":{"label":"medium","score":4.9},"sources":[{"source":"osv","source_id":"GHSA-3cm4-ccvw-6xr6","url":"https://osv.dev/vulnerability/GHSA-3cm4-ccvw-6xr6"}],"summary":"SiYuan: /history/*path and /repo/diff/*path potentially exposing historical snapshots of data/.siyuan/publishAccess.json and data/templates/*"}