SiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read), Incomplete fix of CVE-2026-41894 · CVE-2026-54066 · GitHub Advisory Database · GitHub

SiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read), Incomplete fix of CVE-2026-41894

High severity GitHub Reviewed Published Jun 3, 2026 in siyuan-note/siyuan

0 Open 0 Closed

No open alerts for this advisory

Give feedback on Dependabot alerts