Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-23850
7.5
HIGHCVSS v3
Published
January 19, 2026
Affected
2 projects
Assigned by
GitHub
Severity scale
010
Description
SiYuan is a personal knowledge management system. In versions prior to 3.5.4, the markdown feature allows unrestricted server side html-rendering which allows arbitrary file read (LFD). Version 3.5.4 fixes the issue.
siyuan-note/siyuan
GitHubA privacy-first, self-hosted, fully open source personal knowledge management software, written in typescript and golang.
GitHubA privacy-first, self-hosted, fully open source personal knowledge management software, written in typescript and golang.< 3.5.4NVD
Docker Hub