{"action":"Upgrade github.com/siyuan-note/siyuan/kernel to 0.0.0-20260726004013-64c26e74bb82 or later.","affected":[{"introduced":"0"}],"component":"github.com/siyuan-note/siyuan/kernel","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.0.0-20260726004013-64c26e74bb82"],"ghsa_id":"GHSA-57v5-wqx3-cgj4","id":"tcs_01M5KEXY9B8AT5140X7H9XK5FE","modified_at":"2026-09-10T15:26:02.886497858Z","published_at":"2026-09-08T17:53:44Z","references":["https://osv.dev/vulnerability/GHSA-57v5-wqx3-cgj4","https://github.com/siyuan-note/siyuan/security/advisories/GHSA-57v5-wqx3-cgj4","https://github.com/siyuan-note/siyuan/commit/64c26e74bb82c24a73513107684b91cc01335fab","https://github.com/siyuan-note/siyuan"],"severity":{"label":"medium","score":5.8},"sources":[{"source":"osv","source_id":"GHSA-57v5-wqx3-cgj4","url":"https://osv.dev/vulnerability/GHSA-57v5-wqx3-cgj4"}],"summary":"SiYuan: Database view structure (all view names, layout types and per-field visibility) is returned to anonymous readers by /api/av/getAttributeViewFieldViews"}