VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/siyuan-note/siyuan/kernel: vulnerability history, versions and safety

github.com/siyuan-note/siyuan/kernel is a package in the Go ecosystem. Vulert records 251 vulnerabilities for it across 120 releases, from Dec 2024 to Oct 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
251 vulnerabilities recorded C35 H49 M57 L3 U107
i
93 with no fix published

No patched version yet — these are the ones to plan around.

See the unfixed vulnerabilities →
i
241 in the last 12 months

Most recent disclosure 07 Oct 2026.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/siyuan-note/siyuan/kernel vulnerabilities

Vulert verdict on github.com/siyuan-note/siyuan/kernel v0.0.0-20261020051318-bfe36100477b i

Updated on 23 Oct 2026

Careful: v0.0.0-20261020051318-bfe36100477b has 248 known vulnerabilities, and 92 have no fix yet. Use an earlier safe version, or the workaround listed for each one.

Package health score 50/100
  • Security Unfixed issues
  • Maintenance Sustainable
  • Popularity Key ecosystem project
  • Community Moderate

The current release has a vulnerability with no published fix, which caps this score.

What to do: Pin an earlier, unaffected release if you can, and apply the workaround each vulnerability lists until a fix is published. No fix yet: Vulert alerts you the moment one is published. Monitor it with Vulert →

  • Current release v0.0.0-20261020051318-bfe36100477b — affected i
  • Vulnerabilities on record 251 over 1 year · 241 in the last year i
  • Latest disclosure 07 Oct 2026 i
  • Highest CVSS 10.0 i
  • With no published fix 93 i
  • Stars 46,812 i
  • OpenSSF scorecard 4/10 i
  • Last release this month i
  • Licence MIT i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 22 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/siyuan-note/siyuan/kernel, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20261020051318-bfe36100477b 20 Oct 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20261014031901-7a7430d8a3cf 14 Oct 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20261004110138-fb3355f07d22 04 Oct 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20261004083244-572abc5bcc2a 04 Oct 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20261004041325-40ea44d6ccf2 04 Oct 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20261004033307-85bef06c4356 04 Oct 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260929013748-158812497497 29 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260926023924-64902e51389f 26 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260926023902-e9dc746f8836 26 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260924032325-c6494375ea40 24 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260923101913-bf1a314dfe39 23 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260922044432-60a4387cc1ce 22 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260921170514-52859e4cb9f5 21 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260921160127-49f3559620c1 21 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260921155129-cf6a9da53081 21 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260921135100-005eeec52e33 21 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260920114257-d2633cec1b33 20 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260918025354-05c532c47c06 18 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917162817-af80dd9d7c88 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917154653-29cc1906042e 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917154029-70400dca3372 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917133345-77aec09ac5d1 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917112906-27ce54b17f2c 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917103244-fa1ed4d384a4 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917102726-0fa0ca840171 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917102327-bd91ef7d838b 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917101938-cd75c3cd14d4 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917091924-4d6ebd335b86 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917085910-cd0b8a046a8a 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917084433-682c85803ea1 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917083926-41a71e0127b1 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917083624-ea340631e90d 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917082959-ab9d766e7fa8 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917082940-7d29e31640d3 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917082245-3ad7e0c307d7 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917081423-cb54766dee32 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917075859-102dfdee4dfe 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917075410-d59032e98a71 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917061630-e4d2927dde69 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917054846-87bdbb314bf4 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917043734-a7c790c13ea3 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917034424-746e1a794fab 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917025945-9f775e8a12da 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917014732-2cedfa72ef8a 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260917011540-3e39e630d4ac 17 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916161755-a96cc7c27621 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916161157-57ff1016b186 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916153443-5f512bbbb3ba 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916145926-a952ff9e624c 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916144525-536fcf222df5 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916142533-4cb81f902581 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916140426-4cc075a2d430 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916131210-4c76e3941b70 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916130920-c18d00a0e356 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916130650-af857cee7333 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916130229-d1fc31df8c31 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916125652-d28bb123ab0c 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916120707-e437d8107b2c 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916115244-3700c41cba89 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916093751-ea6e72a2acf2 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916092024-0e137f476a90 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916085519-c9424829f8de 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916085105-f1742c6325e4 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916085101-75ba1bb6ab23 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916084550-0e6b44515e70 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916084302-9177b9dd8997 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916083908-cf5036a8c3cf 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916083630-ebcceb17fc84 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916083544-b6549f65bea1 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916083238-0c70f29e4ea3 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916083153-683873cacc15 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916082831-f2ec03878bd5 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916073050-7feffb816a5f 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916063350-b845f7545cf1 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916063140-b84aa2dccb78 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916062710-29ec14da5805 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916061823-57bfa492e150 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916060924-d44407ed1692 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916055235-14e17e179c1e 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916055023-cda0a1bfcfd2 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916044243-58166b53d4b0 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916042224-c845b5201c90 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916041423-b2afb9ad1dc3 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916035546-74be5a2fedaa 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916034813-56c22cb936f2 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916032719-4add46c0c5be 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916025747-422a1fc1faca 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916025741-e78bd8b9b88c 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916025706-d9fbe37b4a55 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916025425-b78f366a9ef0 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916024853-a9bc4a3c4b47 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916024643-91158e2ab57f 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916022730-38857da0375c 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916021145-27717665afcb 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916021001-5b32156af5c8 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260916020909-3233f17117e7 16 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260908175901-2461dfde7dee 08 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260907031051-8641553a1f07 07 Sep 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260830025221-44a6c212a994 30 Aug 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260821053841-d1007ecfdf3b 21 Aug 2026 C34 H48 M57 L3 U106 MIT No Details →
v0.0.0-20260821052035-be34941aee3e 21 Aug 2026 C34 H48 M57 L3 U106 — No Details →
v0.0.0-20260821024120-db72eeaff68e 21 Aug 2026 C34 H48 M57 L3 U106 — No Details →
v0.0.0-20260821022637-332f0a420cf5 21 Aug 2026 C34 H48 M57 L3 U106 — No Details →
v0.0.0-20260821021002-43608aeee677 21 Aug 2026 C34 H48 M57 L3 U106 — No Details →
v0.0.0-20260821014734-16ae208693a0 21 Aug 2026 C34 H48 M57 L3 U106 — No Details →
v0.0.0-20260821014712-36020f7edefe 21 Aug 2026 C34 H48 M57 L3 U106 — No Details →
v0.0.0-20260821013150-ce2c79493d3b 21 Aug 2026 C34 H48 M57 L3 U106 — No Details →
v0.0.0-20260820164659-e1a2d14c8bf3 20 Aug 2026 C34 H48 M57 L3 U106 — No Details →
v0.0.0-20260820145630-cf731e58d290 20 Aug 2026 C34 H48 M57 L3 U106 — No Details →
v0.0.0-20260819144130-256d73aa7f94 19 Aug 2026 C34 H48 M57 L3 U106 — No Details →
v0.0.0-20260819135417-430a5f231ae8 19 Aug 2026 C34 H48 M57 L3 U106 — No Details →
v0.0.0-20260819011339-aee32c7a956a 19 Aug 2026 C34 H48 M57 L3 U106 — No Details →
v0.0.0-20260818095558-afa823b6b4e4 18 Aug 2026 C34 H48 M57 L3 U106 — No Details →
v0.0.0-20260816081942-cf3e10625640 16 Aug 2026 C34 H48 M57 L3 U106 — No Details →
v0.0.0-20260816034002-035bf9a8c311 16 Aug 2026 C34 H48 M57 L3 U106 — No Details →
v0.0.0-20260816030619-8d90374fd9e8 16 Aug 2026 C34 H48 M57 L3 U106 — No Details →
v0.0.0-20260814165214-4f5f2fbb0646 14 Aug 2026 C34 H48 M57 L3 U106 — No Details →
v0.0.0-20260813142806-dd2778b70d02 13 Aug 2026 C34 H48 M57 L3 U106 — No Details →
v0.0.0-20260813142104-b26a4a307b8a 13 Aug 2026 C34 H48 M57 L3 U106 — No Details →
v0.0.0-20260813140220-c7a3d465b26e 13 Aug 2026 C34 H48 M57 L3 U106 — No Details →

The newest 120 of 804 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2024 8
  • 2025 6
  • 2026 237

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 241 of the 251 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/siyuan-note/siyuan/kernel

The 5 most severe of 251 vulnerabilities recorded for this package

Search all 251 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
Critical SQL Injection Vulnerability in SiYuan Kernel Package 10.0 critical No fix published 03 Aug 2026
CVE-2026-69085: SiYuan Unauthenticated SQL Injection in searchDocs Endpoint 10.0 critical 0.0.0-20260721043339-eef10568384e 01 Oct 2026
CVE-2026-54158: SiYuan Stored XSS to RCE via Attribute-View Cell Rendering 9.9 critical 0.0.0-20260628153353-2d5d72223df4 10 Jul 2026
CVE-2026-50551: SiYuan Stored XSS Vulnerability Leading to Remote Code Execution 9.9 critical 0.0.0-20260628153353-2d5d72223df4 10 Jul 2026
SiYuan: Stored XSS to RCE via CSS-snippet <style> breakout in renderSnippet() 9.9 critical 0.0.0-20260628153353-2d5d72223df4 10 Jul 2026

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/siyuan-note/siyuan/kernel

Is github.com/siyuan-note/siyuan/kernel safe to use?

Vulert records 251 vulnerabilities for github.com/siyuan-note/siyuan/kernel in Go: 35 critical, 49 high, 57 medium and 3 low, plus 107 not yet rated. 93 of them have no published fix yet, so those are the ones to avoid or mitigate.

What is github.com/siyuan-note/siyuan/kernel's Vulert package health score?

Vulert scores github.com/siyuan-note/siyuan/kernel 50/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15). The current release has a vulnerability with no published fix, which caps this score.

Is the latest version of github.com/siyuan-note/siyuan/kernel affected?

Yes. v0.0.0-20261020051318-bfe36100477b, the version you would install today, has 248 known vulnerabilities, and 92 has no published fix yet. Use an earlier unaffected release, or the workaround each vulnerability lists.

How many vulnerabilities does github.com/siyuan-note/siyuan/kernel have?

251 vulnerabilities are recorded for github.com/siyuan-note/siyuan/kernel in the Go ecosystem: 35 critical, 49 high, 57 medium and 3 low, plus 107 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/siyuan-note/siyuan/kernel vulnerabilities disclosed?

241 vulnerabilities were recorded for github.com/siyuan-note/siyuan/kernel in the last 12 months, and the oldest entry in this database dates to 11 Dec 2024. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/siyuan-note/siyuan/kernel are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/siyuan-note/siyuan/kernel for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/siyuan-note/siyuan/kernel version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.