MEDIUM4.9

GO-2026-6662

SiYuan: /history/*path and /repo/diff/*path potentially exposing historical snapshots of data/.siyuan/publishAccess.json and data/templates/* in github.com/siyuan-note/siyuan/kernel

Quick fix

GO-2026-6662 — github.com/siyuan-note/siyuan/kernel: upgrade to the fixed version with the command below.

go get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260816034002-035bf9a8c311

Details

SiYuan: /history/*path and /repo/diff/*path potentially exposing historical snapshots of data/.siyuan/publishAccess.json and data/templates/* in github.com/siyuan-note/siyuan/kernel

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/siyuan-note/siyuan/kernel

Introduced in: 0Fixed in: 0.0.0-20260816034002-035bf9a8c311

Fixgo get github.com/siyuan-note/siyuan/kernel@v0.0.0-20260816034002-035bf9a8c311

References

https://github.com/siyuan-note/siyuan/security/advisories/GHSA-3cm4-ccvw-6xr6[ADVISORY]
https://github.com/siyuan-note/siyuan/commit/035bf9a8c311c6f8468f2f1054b4d5e1711787e2[WEB]
https://github.com/siyuan-note/siyuan/releases/tag/v3.8.1[WEB]