SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files
Go github.com/siyuan-note/siyuan/kernel · Upgrade to 0.0.0-20260808051406-3542530c505f (pre-release) or later · < 0.0.0-20260808051406-3542530c505f · CVE-2026-60083 · GHSA-c8r8-95hg-mp34 · amended