Skip to content
Threat Feed
Subscribe

Product

Kernel (< 0.0.0-20260723035036-0a176345e02a)

1 brief RSS
high advisory

Second-Order SSTI in SiYuan via Attribute-View Template Columns

SiYuan kernel is vulnerable to a second-order SSTI via the queryBlocks template function, allowing attackers to achieve arbitrary SQL execution upon rendering imported malicious content.

kernel vulnerability ssti sql-injection rce
2t 1c