VDB

GO-2026-4708

GO-2026-4708 PUBLISHED

SiYuan importStdMd: unvalidated localPath imports arbitrary host directories as persistent notes in github.com/siyuan-note/siyuan

Affected Products

VendorProductVersions
github.comsiyuan-note/siyuan0, 0

Timeline

  • Mar 26, 2026 CVE Published
  • Mar 26, 2026 CVE Updated
  • May 1, 2026 Security Advisory
Open in Interactive Console →
$ Console Community · 100/wk Open console ›