Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-55659
5.4
MEDIUMCVSS v3
Published
December 12, 2024
Affected
2 projects
Assigned by
GitHub
Severity scale
010
Description
SiYuan is a personal knowledge management system. Prior to version 3.1.16, the `/api/asset/upload` endpoint in Siyuan is vulnerable to both arbitrary file write to the host and stored cross-site scripting (via the file write). Version 3.1.16 contains a patch for the issue.
siyuan-note/siyuan
GitHubA privacy-first, self-hosted, fully open source personal knowledge management software, written in typescript and golang.
GitHubA privacy-first, self-hosted, fully open source personal knowledge management software, written in typescript and golang.= 3.1.15NVD
Docker Hub