https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:37:20 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-207001 EUVD-2026-207001 https://cve.radiocsirt.org/vuln/euvd-2026-207001 https://cve.radiocsirt.org/vuln/fkie_cve-2024-55659 <p>SiYuan is a personal knowledge management system. Prior to version 3.1.16, the `/api/asset/upload` endpoint in Siyuan is vulnerable to both arbitrary file write to the host and stored cross-site scripting (via the file write). Version 3.1.16 contains a patch for the issue.</p> <p>SiYuan is a personal knowledge management system. Prior to version 3.1.16, the `/api/asset/upload` endpoint in Siyuan is vulnerable to both arbitrary file write to the host and stored cross-site scripting (via the file write). Version 3.1.16 contains a patch for the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-55659 https://cve.radiocsirt.org/vuln/ghsa-fqj6-whhx-47p7 <p><strong>Affected:</strong> Go: github.com/siyuan-note/siyuan/kernel</p> <p>### Summary</p> <p>The /api/asset/upload endpoint in Siyuan is vulnerable to both arbitrary file write to the host and stored XSS (via the file write).</p> <p>### Impact Arbitrary file write</p> <p><strong>Affected:</strong> Go: github.com/siyuan-note/siyuan/kernel</p> <p>### Summary</p> <p>The /api/asset/upload endpoint in Siyuan is vulnerable to both arbitrary file write to the host and stored XSS (via the file write).</p> <p>### Impact Arbitrary file write</p> https://cve.radiocsirt.org/vuln/ghsa-fqj6-whhx-47p7 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14599-1 <p>govulncheck-vulndb-0.0.20241213T205935-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20241213T205935-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14599-1