github.com/siyuan-note/siyuan vulnerabilities (Go)

2 vulnerabilities.

• github.com/siyuan-note/siyuan Go SiYuan has a SanitizeSVG bypass via data:text/xml in getDynamicIcon (incomplete fix for CVE-2026-29183) CVE-2026-32940 9.3 CriticalMarch 17, 2026
• github.com/siyuan-note/siyuan Go SiYuan importStdMd: unvalidated localPath imports arbitrary host directories as persistent notes CVE-2026-32750 6.8 MediumMarch 16, 2026