SiYuan before v3.8.1 Path Traversal via asset.upload

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-82233 · Microsoft / collected KEV context

EUVD-2026-67685

GHSA-m4pm-qxhv-84p5

GHSA-p23f-cm6q-2qp8

GO-2026-6655

cve-program · CVE-2026-82233

• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-p23f-cm6q-2qp8
• https://www.vulncheck.com/advisories/siyuan-before-3.8.1-path-traversal-via-asset-upload

euvd · EUVD-2026-67685

• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-p23f-cm6q-2qp8
• https://www.vulncheck.com/advisories/siyuan-before-3.8.1-path-traversal-via-asset-upload

nvd · CVE-2026-82233

• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-p23f-cm6q-2qp8
• https://www.vulncheck.com/advisories/siyuan-before-3.8.1-path-traversal-via-asset-upload

osv · GHSA-p23f-cm6q-2qp8

• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-p23f-cm6q-2qp8
• https://github.com/siyuan-note/siyuan/commit/b26a4a307b8ae5067387ea76ce1fad6b7f4bf9e7
• https://github.com/siyuan-note/siyuan
• https://github.com/siyuan-note/siyuan/releases/tag/v3.8.1

osv · GO-2026-6655

• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-p23f-cm6q-2qp8
• https://github.com/siyuan-note/siyuan/commit/b26a4a307b8ae5067387ea76ce1fad6b7f4bf9e7
• https://github.com/siyuan-note/siyuan/releases/tag/v3.8.1

No related operational record is retained in the current change model.