CVE-2026-109310
- Source
- https://cve.org/CVERecord?id=CVE-2026-109310
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-109310.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-109310
- Aliases
-
- GHSA-cxwr-r7cq-xw52
- Published
- 2026-10-12T16:05:06Z
- Modified
- 2026-10-28T02:30:45Z
- Severity
-
- 7.1 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- SiYuan v3.1.12 before v3.8.6 Denial of Service via getDynamicIcon Template
- Details
-
SiYuan v3.1.12 before v3.8.6 fails to restrict the Sprig template function map in the /api/icon/getDynamicIcon content parameter, allowing resource exhaustion. A publish reader, or anyone when publish auth is disabled, can use uncapped functions like until to OOM-kill the kernel with one request.
- Database specific
{ "cna_assigner": "VulnCheck", "cwe_ids": [ "CWE-770" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/109xxx/CVE-2026-109310.json" }- References
-
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/109xxx/CVE-2026-109310.json
- https://github.com/siyuan-note/siyuan/security/advisories/GHSA-cxwr-r7cq-xw52
- https://nvd.nist.gov/vuln/detail/CVE-2026-109310
- https://www.vulncheck.com/advisories/siyuan-3.1.12-before-3.8.6-denial-of-service-via-getdynamicicon-template
Affected packages
Git / github.com/siyuan-note/siyuan
Affected ranges
- Type
- GIT
- Repo
- https://github.com/siyuan-note/siyuan
- Events
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "3.1.12" }, { "fixed": "3.8.6" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" }, { "range": [ { "introduced": "3.1.12" }, { "fixed": "3.8.6" } ], "source": "DESCRIPTION" } ] }
Affected versions
v3.*
v3.1.12
v3.1.13
v3.1.14
v3.1.14-dev2
v3.1.15
v3.1.15-dev1
v3.1.15-dev3
v3.1.16
v3.1.17
v3.1.18
v3.1.19
v3.1.19-dev3
v3.1.20
v3.1.20-dev3
v3.1.20-dev4
v3.1.21
v3.1.21-dev1
v3.1.21-dev3
v3.1.21-dev4
v3.1.22
v3.1.22-dev1
v3.1.22-dev2
v3.1.23
v3.1.24
v3.1.25
v3.1.25-dev3
v3.1.25-dev4
v3.1.25-dev6
v3.1.26
v3.1.26-dev1
v3.1.26-dev2
v3.1.26-dev3
v3.1.27
v3.1.27-dev1
v3.1.27-dev2
v3.1.27-dev4
v3.1.28
v3.1.28-dev2
v3.1.28-dev3
v3.1.29
v3.1.29-dev3
v3.1.30
v3.1.30-dev1
v3.1.31
v3.1.32
v3.1.32-dev2
v3.2.0-dev1
v3.2.0-dev10
v3.2.0-dev2
v3.2.0-dev3
v3.2.0-dev4
v3.2.0-dev6
v3.2.0-dev8
v3.2.0-dev9
v3.2.1
v3.2.1-dev2
v3.2.1-dev3
v3.2.1-dev4
v3.2.1-dev5
v3.2.1-dev6
v3.3.0
v3.3.0-dev3
v3.3.0-dev4
v3.3.1
v3.3.2
v3.3.2-dev1
v3.3.2-dev2
v3.3.3
v3.3.3-dev1
v3.3.3-dev2
v3.3.3-dev3
v3.3.3-dev4
v3.3.3-dev5
v3.3.4
v3.3.4-dev1
v3.3.4-dev2
v3.3.5
v3.3.6
v3.3.6-dev1
v3.3.6-dev2
v3.4.0
v3.4.0-dev1
v3.4.0-dev2
v3.4.0-dev3
v3.4.0-dev4
v3.4.0-dev5
v3.4.1
v3.4.1-dev1
v3.4.2
v3.4.2-dev1
v3.5.0
v3.5.0-dev1
v3.5.0-dev2
v3.5.1
v3.5.1-dev1
v3.5.1-dev2
v3.5.10
v3.5.2
v3.5.2-dev1
v3.5.2-dev2
v3.5.3
v3.5.3-dev2
v3.5.3-dev3
v3.5.3-dev4
v3.5.3-dev5
v3.5.4
v3.5.4-dev1
v3.5.4-dev2
v3.5.4-dev3
v3.5.4-dev5
v3.5.5
v3.5.7
v3.5.8
v3.5.8-dev2
v3.5.9
v3.6.0
v3.6.1
v3.6.2
v3.6.3
v3.6.4
v3.6.4-dev2
v3.6.5
v3.6.5-dev2
v3.7.0-dev12
v3.7.0-dev2
v3.7.0-dev5
v3.7.0-dev8
v3.7.0-rc.1
v3.7.0-rc.2
v3.7.3
v3.7.3-beta.1
v3.7.3-beta.2
v3.7.4-alpha.2
v3.7.4-alpha.4
v3.8.0
v3.8.0-alpha.2
v3.8.0-alpha.3
v3.8.0-alpha.4
v3.8.0-beta.2
v3.8.1
v3.8.1-beta.1
v3.8.1-beta.4
v3.8.1-beta.5
v3.8.1-beta.6
v3.8.2-alpha.1
v3.8.2-alpha.3
v3.8.2-alpha.4
v3.8.2-alpha.5
v3.8.2-alpha.6
v3.8.3
v3.8.3-alpha.1
v3.8.3-alpha.2
v3.8.3-alpha.3
v3.8.3-beta.1
v3.8.4
v3.8.4-beta.1
v3.8.4-beta.2
v3.8.4-beta.3
v3.8.4-beta.4
v3.8.4-beta.5
v3.8.5
v3.8.5-alpha.3
v3.8.5-alpha.5
v3.8.5-beta.1
v3.8.5-beta.2
v3.8.5-beta.3
v3.8.5-beta.5
v3.8.6-alpha.1
v3.8.6-alpha.10
v3.8.6-alpha.2
v3.8.6-alpha.3
v3.8.6-alpha.4
v3.8.6-alpha.7
v3.8.6-alpha.8
v3.8.6-alpha.9
v3.8.6-beta.1
v3.8.6-beta.2