vulnerability in libapache2-mod-php7.0 (CLSA-2026-1778687453). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.33-0ubuntu0.16.04.17+tuxcare.els21` or later.
vulnerability in github.com/siyuan-note/siyuan/kernel (CVE-2026-45375). Successful exploitation can lead to full system takeover. Exploitable via ``name``.
vulnerability in github.com/siyuan-note/siyuan/kernel (CVE-2026-45371). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/graph/getGraph`. Mitigation: upgrade to `0.0.0-20260512140701-d7b77d945e0d` or later.
vulnerability in anchor-lang (GHSA-429q-fhh4-r6hj). Risk of unauthorized operations or information disclosure. Exploitable via ``InterfaceAccount``. Mitigation: upgrade to `1.0.0-rc.2` or later.
vulnerability in io.goobi.viewer:viewer-core (CVE-2026-45083). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/v1/index/stream`.
OS command injection in gitlab.com/uniget-org/cli (CVE-2026-45152). Successful exploitation can lead to full system takeover. Exploitable via ``check``. Mitigation: upgrade to `0.27.1` or later.
vulnerability in github.com/siyuan-note/siyuan/kernel (CVE-2026-45148). Risk of unauthorized operations or information disclosure. Exploitable via ``getBookmark``. Mitigation: upgrade to `0.0.0-20260512140701-d7b77d945e0d` or later.