VULNRABLE / Vulnerability / GHSA-xp3q-r38w-vgqm

GHSA-xp3q-r38w-vgqm

MEDIUM LOW github.com/siyuan-note/siyuan/kernel GHSA

Exploit verdict: No active-exploit signal

CVSS Score
5.5
Severity
MEDIUM
EPSS
—
Source
GHSA

Summary

SiYuan: The publish filter for local storage returns the administrator's entire storage map with only three keys sanitized

What this means

GHSA-xp3q-r38w-vgqm is a medium-severity vulnerability affecting github.com/siyuan-note/siyuan/kernel, rated CVSS 5.5. Published October 23, 2026.

View full advisory at GHSA →