CVE-2026-23850 - SiYuan vulnerable to arbitrary file read

CVE ID : CVE-2026-23850 Published : Jan. 19, 2026, 7:52 p.m. | 29 minutes ago Description : SiYuan is a personal knowledge management system. In versions prior to 3.5.4, the markdown feature allows unrestricted server side html-rendering which allows arbitrary file read (LFD). Version 3.5.4 fixes the issue. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...