{"id":"GO-2026-6663","revision":"faf68e970c2e4f5f8fce43ba782b58e3","records":[{"revision":"faf68e970c2e4f5f8fce43ba782b58e3","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-6663","aliases":["CVE-2026-85175","GHSA-4wwp-f6gw-6qm5"],"title":"SiYuan: TLS Private Keys Readable via getFile (Incomplete Blocklist) in github.com/siyuan-note/siyuan/kernel","description":"SiYuan: TLS Private Keys Readable via getFile (Incomplete Blocklist) in github.com/siyuan-note/siyuan/kernel","state":0,"publishedAt":"2026-10-07T14:10:39+00:00","modifiedAt":"2026-10-07T17:55:53.5271301+00:00","affected":[{"ecosystem":"Go","name":"github.com/siyuan-note/siyuan/kernel","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.0.0-20260819144130-256d73aa7f94"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/siyuan-note/siyuan/security/advisories/GHSA-4wwp-f6gw-6qm5","https://github.com/siyuan-note/siyuan/commit/256d73aa7f94aead7ba255b668e32c140af23137","https://github.com/siyuan-note/siyuan/releases/tag/v3.8.2"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6663","license":"OSV · upstream source license applies","key":"osv:GO-2026-6663","identifiers":["GO-2026-6663","CVE-2026-85175","GHSA-4wwp-f6gw-6qm5"]},"retained":false,"historicalAffected":[]}],"coverage":[]}