blob: 3366e418f9b01f2cd21f3ffd8ee4f6c52322f4e8 [file] [edit]
id: GO-2026-5318
modules:
- module: github.com/siyuan-note/siyuan/kernel
non_go_versions:
- fixed: 3.6.2
vulnerable_at: 0.0.0-20260421031503-96dfe0bea474
summary: |-
SiYuan: Unauthenticated Access to Password-Protected Bookmarks via
/api/bookmark/getBookmark in github.com/siyuan-note/siyuan/kernel
cves:
- CVE-2026-34453
ghsas:
- GHSA-c77m-r996-jr3q
references:
- advisory: https://github.com/siyuan-note/siyuan/security/advisories/GHSA-c77m-r996-jr3q
- advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-34453
- web: https://github.com/siyuan-note/siyuan/issues/17246
- web: https://github.com/siyuan-note/siyuan/releases/tag/v3.6.2
source:
id: GHSA-c77m-r996-jr3q
created: 2026-06-25T02:40:42.912127036-04:00
review_status: UNREVIEWED