PT-2026-6503 · Go · Github.Com/Siyuan-Note/Siyuan/Kernel

Published 2026-02-03 · Updated 2026-02-03

OSV

SiYuan Has a Stored Cross-Site Scripting (XSS) Vulnerability via Unrestricted SVG File Upload in github.com/siyuan-note/siyuan/kernel

Related Identifiers

GO-2026-4324

Affected Products

Github.Com/Siyuan-Note/Siyuan/Kernel

References · 5

• https://osv.dev/vulnerability/GO-2026-4324 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23645 · Security Note
• https://github.com/siyuan-note/siyuan/commit/11115da3d0de950593ee4ce375cf7f9018484388 · Note
• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-pcjq-j3mq-jv5j · Note
• https://github.com/siyuan-note/siyuan/issues/16844 · Note