| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/siyuan-note/siyuan/kernel | ≤ 0.0.0-20241210012039-5129ad926a21all versions | |
| siyuan | = 3.1.15 |
An arbitrary file read vulnerability exists in Siyuan's /api/template/render endpoint. The absence of proper validation on the path parameter allows attackers to access sensitive files on the host system.
Arbitrary file read on the host
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free