{"action":"Upgrade github.com/siyuan-note/siyuan/kernel to 0.0.0-20260724123622-8fb1b5766093 or later.","affected":[{"introduced":"0"}],"component":"github.com/siyuan-note/siyuan/kernel","cve_ids":["CVE-2026-72797"],"ecosystem":"Go","epss":0.00296,"exploited":false,"fixed_versions":["0.0.0-20260724123622-8fb1b5766093"],"ghsa_id":"GHSA-f2rw-w22v-54vh","id":"tcs_01M5KF866BCS36X1PRYJR0Y72H","modified_at":"2026-09-10T15:25:53.773932582Z","published_at":"2026-09-04T21:01:46Z","references":["https://osv.dev/vulnerability/GHSA-f2rw-w22v-54vh","https://github.com/siyuan-note/siyuan/security/advisories/GHSA-f2rw-w22v-54vh","https://nvd.nist.gov/vuln/detail/CVE-2026-72797","https://github.com/siyuan-note/siyuan/commit/8fb1b5766093371f6a516c221c92026b904fe779","https://github.com/siyuan-note/siyuan","https://www.vulncheck.com/advisories/siyuan-before-information-disclosure-via-getencryptednotebookstatus"],"severity":{"label":"medium","score":5.8},"sources":[{"source":"osv","source_id":"GHSA-f2rw-w22v-54vh","url":"https://osv.dev/vulnerability/GHSA-f2rw-w22v-54vh"}],"summary":"SiYuan: getEncryptedNotebookStatus discloses names and current lock/unlock state of all encrypted notebooks to anonymous readers"}