SiYuan before v3.7.2 Path Traversal via /export/temp/

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-65607 · Microsoft / collected KEV context

GHSA-gw25-m53r-qh88

GO-2026-6365

cve-program · CVE-2026-65607

• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-gw25-m53r-qh88
• https://github.com/siyuan-note/siyuan/commit/bb481e1290c4a34255652ede85a546504505d2a7
• https://www.vulncheck.com/advisories/siyuan-before-path-traversal-via-export-temp

nvd · CVE-2026-65607

• https://github.com/siyuan-note/siyuan/commit/bb481e1290c4a34255652ede85a546504505d2a7
• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-gw25-m53r-qh88
• https://www.vulncheck.com/advisories/siyuan-before-path-traversal-via-export-temp

osv · GHSA-gw25-m53r-qh88

• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-gw25-m53r-qh88
• https://github.com/siyuan-note/siyuan/commit/b763d787d1f2b862c577049e4ee147c5857fe413
• https://github.com/siyuan-note/siyuan

osv · GO-2026-6365

• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-gw25-m53r-qh88
• https://github.com/siyuan-note/siyuan/commit/b763d787d1f2b862c577049e4ee147c5857fe413

No related operational record is retained in the current change model.