Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:06:49 +0000 EUVD-2026-207000 https://cve.radiocsirt.org/vuln/euvd-2026-207000 EUVD-2026-207000 https://cve.radiocsirt.org/vuln/euvd-2026-207000 fkie_cve-2024-55660 https://cve.radiocsirt.org/vuln/fkie_cve-2024-55660 <p>SiYuan is a personal knowledge management system. Prior to version 3.1.16, SiYuan&#39;s `/api/template/renderSprig` endpoint is vulnerable to Server-Side Template Injection (SSTI) through the Sprig template engine. Although the engine has limitations, it allows attackers to access environment variables. Version 3.1.16 contains a patch for the issue.</p> <p>SiYuan is a personal knowledge management system. Prior to version 3.1.16, SiYuan&#39;s `/api/template/renderSprig` endpoint is vulnerable to Server-Side Template Injection (SSTI) through the Sprig template engine. Although the engine has limitations, it allows attackers to access environment variables. Version 3.1.16 contains a patch for the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-55660 GHSA-4pjc-pwgq-q9jp — SiYuan has an SSTI via /api/template/renderSprig https://cve.radiocsirt.org/vuln/ghsa-4pjc-pwgq-q9jp <p><strong>Affected:</strong> Go: github.com/siyuan-note/siyuan/kernel</p> <p>### Summary Siyuan&#39;s /api/template/renderSprig endpoint is vulnerable to Server-Side Template Injection (SSTI) through the Sprig template engine. Although the engine has limitations, it allows attackers to access environment variables</p> <p>### Impact</p> <p>Information leakage</p> <p><strong>Affected:</strong> Go: github.com/siyuan-note/siyuan/kernel</p> <p>### Summary Siyuan&#39;s /api/template/renderSprig endpoint is vulnerable to Server-Side Template Injection (SSTI) through the Sprig template engine. Although the engine has limitations, it allows attackers to access environment variables</p> <p>### Impact</p> <p>Information leakage</p> https://cve.radiocsirt.org/vuln/ghsa-4pjc-pwgq-q9jp openSUSE-SU-2024:14599-1 — govulncheck-vulndb-0.0.20241213T205935-1.1 on GA media https://cve.radiocsirt.org/vuln/opensuse-su-2024:14599-1 <p>govulncheck-vulndb-0.0.20241213T205935-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20241213T205935-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14599-1