{"data":{"id":"cc50fd24-5638-4ced-8a72-16e13448d441","title":"GHSA-x8gv-g2g3-65fj: SiYuan Agent Tools SSRF via DNS-Rebinding TOCTOU (Bypass of CheckHostSSRF)","summary":"SiYuan's AI Agent tools `http_request` (`util.HTTPRequest`) and `web_fetch` (`util.WebFetch`) check outbound hosts with `CheckHostSSRF`, which resolves DNS once at guard time, while the actual connection resolves DNS again through the default `net.Dialer` with no connect-time private-IP check. An attacker-controlled domain can return a public IP to the guard and a private or metadata address such as `169.254.169.254` to the connection, bypassing the SSRF defense. Affected versions are `<= 3.8.0`, verified on v3.8.0, and the flaw is an incomplete-fix variant of GHSA-rg26-cg95-gq6p.","solution":"Fixed in 3.8.1","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-x8gv-g2g3-65fj","publishedAt":"2026-10-02T23:17:16.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["github.com/siyuan-note/siyuan/kernel@< 0.0.0-20260813142806-dd2778b70d02 (fixed: 0.0.0-20260813142806-dd2778b70d02)"],"affectedPackageNames":["github.com/siyuan-note/siyuan/kernel"],"affectedVendors":[],"affectedVendorsRaw":["SiYuan Agent Tools","MCP client"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-x8gv-g2g3-65fj"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-10-02T23:17:16.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}