{"action":"Upgrade github.com/siyuan-note/siyuan/kernel to 0.0.0-20260726004013-64c26e74bb82 or later.","affected":[{"introduced":"0"}],"component":"github.com/siyuan-note/siyuan/kernel","cve_ids":["CVE-2026-72791"],"ecosystem":"Go","epss":0.00325,"exploited":false,"fixed_versions":["0.0.0-20260726004013-64c26e74bb82"],"ghsa_id":"GHSA-57v5-wqx3-cgj4","id":"tcs_01M5KGTNBCE6S7TZ1ZN0RV7GGM","modified_at":"2026-10-30T10:55:35.803640924Z","published_at":"2026-09-10T14:48:42Z","references":["https://osv.dev/vulnerability/GO-2026-6430","https://github.com/siyuan-note/siyuan/security/advisories/GHSA-57v5-wqx3-cgj4","https://github.com/siyuan-note/siyuan/commit/64c26e74bb82c24a73513107684b91cc01335fab"],"severity":{"label":"medium","score":5.8},"sources":[{"source":"osv","source_id":"GO-2026-6430","url":"https://osv.dev/vulnerability/GO-2026-6430"},{"source":"nvd","source_id":"CVE-2026-72791","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72791"}],"summary":"SiYuan: Database view structure (all view names, layout types and per-field visibility) is returned to anonymous readers by /api/av/getAttributeViewFieldViews in github.com/siyuan-note/siyuan/kernel"}