SiYuan: Outline state for any document, including documents forbidden to readers, is returned by /api/storage/getOutlineStorage with no access check in github.com/siyuan-note/siyuan/kernel
osv · CVE-2026-73607 · GHSA-53fp-9jmv-227g
Go: github.com/siyuan-note/siyuan/kernel