SiYuan importStdMd: unvalidated localPath imports arbitrary host directories as persistent notes
Moderate severity
GitHub Reviewed
Published
Mar 14, 2026
in
siyuan-note/siyuan
•
Updated Mar 20, 2026
Give feedback on Dependabot alerts