blob: 2c24d39d7569f03500a514aa567f4d4ca13f2ad5 [file] [edit]
id: GO-2026-4720
modules:
- module: github.com/siyuan-note/siyuan/kernel
versions:
- fixed: 0.0.0-20260317012524-fe4523fff2c8
non_go_versions:
- fixed: 3.6.1
vulnerable_at: 0.0.0-20260304035530-d03ebdec8279
summary: |-
SiYuan vulnerable to remote code execution via marketplace XSS in
github.com/siyuan-note/siyuan/kernel
ghsas:
- GHSA-v3mg-9v85-fcm7
references:
- advisory: https://github.com/siyuan-note/siyuan/security/advisories/GHSA-v3mg-9v85-fcm7
source:
id: GHSA-v3mg-9v85-fcm7
created: 2026-08-18T13:33:01.566297-04:00
review_status: UNREVIEWED