VDB

GO-2026-4658

GO-2026-4658 PUBLISHED

SiYuan: Authorization Bypass Allows Low-Privilege Publish User to Modify Notebook Content via /api/block/appendHeadingChildren in github.com/siyuan-note/siyuan/kernel

Affected Products

VendorProductVersions
github.comsiyuan-note/siyuan/kernel0, 0

Timeline

  • Mar 11, 2026 CVE Published
  • Mar 23, 2026 CVE Updated
  • May 1, 2026 Security Advisory
Open in Interactive Console →
$ Console Community · 100/wk Open console ›