{"id":"GO-2026-6632","aliases":["GHSA-9cqf-hhrq-7v45"],"title":"SiYuan: getAttributeViewSearchTarget returns database row content to anonymous readers with no publish-access check, reopening the class …","summary":"SiYuan: getAttributeViewSearchTarget returns database row content to anonymous readers with no publish-access check, reopening the class closed one day earlier at the adjacent route in github.com/siyuan-note/siyuan/kernel","severity":"none","vendor":"siyuan-note","product":"github.com/siyuan-note/siyuan/kernel","ecosystem":"go","affected":["github.com/siyuan-note/siyuan/kernel >= 0.0.0-20260726161145-9b8e8956f997, < 0.0.0-20260812083335-251596fc0de2"],"patched":["github.com/siyuan-note/siyuan/kernel 0.0.0-20260812083335-251596fc0de2"],"published":"2026-10-07","updated":"2026-10-07","sourceUpdated":"2026-10-07T17:45:13.484533926Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GO-2026-6632","references":[{"url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-9cqf-hhrq-7v45"},{"url":"https://github.com/siyuan-note/siyuan/commit/9b8e8956f997d6452d40aff4159d58f3283a98a4"},{"url":"https://github.com/siyuan-note/siyuan/releases/tag/v3.8.0"}],"tags":["osv","go"],"ingestedAt":"2026-10-08T07:34:51.738Z","slug":"GO-2026-6632","body":"## Overview\n\nSiYuan: getAttributeViewSearchTarget returns database row content to anonymous readers with no publish-access check, reopening the class closed one day earlier at the adjacent route in github.com/siyuan-note/siyuan/kernel\n\n## Affected packages\n\n- `github.com/siyuan-note/siyuan/kernel >= 0.0.0-20260726161145-9b8e8956f997, < 0.0.0-20260812083335-251596fc0de2`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `github.com/siyuan-note/siyuan/kernel 0.0.0-20260812083335-251596fc0de2`","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}