GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
4 advisories
SiYuan: /history/*path and /repo/diff/*path potentially exposing historical snapshots of data/.siyuan/publishAccess.json and data/templates/*
Moderate
GHSA-3cm4-ccvw-6xr6
was published
for
github.com/siyuan-note/siyuan/kernel
(Go)
Oct 5, 2026
SiYuan: Missing consistency check between packageName and repoURL/repoHash in bazaar package install allows overwriting an existing, trusted plugin
Moderate
CVE-2026-62204
was published
for
github.com/siyuan-note/siyuan/kernel
(Go)
Oct 23, 2026
SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files
Moderate
CVE-2026-60083
was published
for
github.com/siyuan-note/siyuan/kernel
(Go)
Oct 27, 2026
Authlib: Default JWT bearer grant accepts assertions for the wrong audience
Moderate
CVE-2026-114618
was published
for
authlib
(pip)
Oct 27, 2026
ProTip!
Advisories are also available from the
GraphQL API