VULNRABLE / Vulnerability / GHSA-p23f-cm6q-2qp8
GHSA-p23f-cm6q-2qp8
MEDIUM LOW github.com/siyuan-note/siyuan/kernel GHSA
Exploit verdict: No active-exploit signal
CVSS Score
5.5
Severity
MEDIUM
EPSS
—
Source
GHSA
Summary
SiYuan MCP asset.upload Reads Arbitrary Absolute File Paths (Workspace Boundary Bypass)
What this means
GHSA-p23f-cm6q-2qp8 is a medium-severity vulnerability affecting github.com/siyuan-note/siyuan/kernel, rated CVSS 5.5. Published October 3, 2026.
View full advisory at GHSA →