{"id":"EUVD-2026-67686","revision":"d2c835b02c384a7a9b28a4e90efb8495","records":[{"revision":"d2c835b02c384a7a9b28a4e90efb8495","observedAt":"2026-11-09T15:15:33.69+00:00","statement":{"source":"euvd","id":"EUVD-2026-67686","aliases":["CVE-2026-82234","GHSA-g42r-m263-958h"],"title":"SiYuan versions before v3.8.1 contain a server-side request forgery vulnerability in the http_request and web_fetch agent tools that perform DNS resolution only at guard time without validating the connect-time resolution. Attackers can use…","description":"SiYuan versions before v3.8.1 contain a server-side request forgery vulnerability in the http_request and web_fetch agent tools that perform DNS resolution only at guard time without validating the connect-time resolution. Attackers can use DNS rebinding to answer the guard resolution with a public IP and the connect resolution with a private or metadata IP, bypassing the SSRF defense to access cloud instance metadata and internal services.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N","score":8.4,"severity":null}],"references":["https://github.com/siyuan-note/siyuan/security/advisories/GHSA-x8gv-g2g3-65fj","https://www.vulncheck.com/advisories/siyuan-before-3.8.1-ssrf-via-dns-rebinding-toctou"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-67686","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Aug 28, 2026, 10:49:24 AM","dateUpdated":"Aug 28, 2026, 4:10:07 PM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-67686","identifiers":["EUVD-2026-67686","CVE-2026-82234","GHSA-g42r-m263-958h"]},"retained":false,"historicalAffected":[]}],"coverage":[]}