| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/siyuan-note/siyuan/kernel | ≤ 0.0.0-20241210012039-5129ad926a21all versions | |
| siyuan | = 3.1.15 |
Siyuan's /api/template/renderSprig endpoint is vulnerable to Server-Side Template Injection (SSTI) through the Sprig template engine. Although the engine has limitations, it allows attackers to access environment variables
Information leakage
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free