https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:59:06.731504+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-207000 EUVD-2026-207000 2026-10-04T04:59:06.791567+00:00 EUVD-2026-207000 https://cve.radiocsirt.org/vuln/fkie_cve-2024-55660 fkie_cve-2024-55660 2026-10-04T04:59:06.791601+00:00

SiYuan is a personal knowledge management system. Prior to version 3.1.16, SiYuan's `/api/template/renderSprig` endpoint is vulnerable to Server-Side Template Injection (SSTI) through the Sprig template engine. Although the engine has limitations, it allows attackers to access environment variables. Version 3.1.16 contains a patch for the issue.

 https://cve.radiocsirt.org/vuln/ghsa-4pjc-pwgq-q9jp GHSA-4pjc-pwgq-q9jp — SiYuan has an SSTI via /api/template/renderSprig 2026-10-04T04:59:06.791634+00:00

Affected: Go: github.com/siyuan-note/siyuan/kernel

### Summary Siyuan's /api/template/renderSprig endpoint is vulnerable to Server-Side Template Injection (SSTI) through the Sprig template engine. Although the engine has limitations, it allows attackers to access environment variables

### Impact

Information leakage

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14599-1 openSUSE-SU-2024:14599-1 — govulncheck-vulndb-0.0.20241213T205935-1.1 on GA media 2026-10-04T04:59:06.791662+00:00

govulncheck-vulndb-0.0.20241213T205935-1.1 on GA media