https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T02:36:57.003572+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-55660 CVE-2024-55660 — SiYuan has an SSTI via /api/template/renderSprig 2026-10-08T02:36:57.019468+00:00

Affected: siyuan-note siyuan

SiYuan is a personal knowledge management system. Prior to version 3.1.16, SiYuan's `/api/template/renderSprig` endpoint is vulnerable to Server-Side Template Injection (SSTI) through the Sprig template engine. Although the engine has limitations, it allows attackers to access environment variables. Version 3.1.16 contains a patch for the issue.