Threats tagged 'ghsa-h9g5-83g6-g5ch'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.4	EPSS 0.5%	CVE-2026-87815siyuan · External Control of File Name or Path High8.4EPSS 0.5%2026-09-09CVE Database V5CVE-2026-87815 SiYuan versions before v3.8.2 contain a path traversal vulnerability in the /api/riff/removeRiffDeck endpoint that fails to validate the deckID parameter. An authenticated administrator can supply path traversal sequences to delete arbitrary .deck and .cards files outside the workspace directory. EPSS 0.5%Vulnerability siyuan-note #ghsa-h9g5-83g6-g5ch	CVE Database V5	2026-09-09

Page 1 of 1