CVE-2026-32110 | SiYuan up to 3.5.x Endpoint forwardProxy server-side request forgery (GHSA-56cv-c5p2-j2wg)

A vulnerability was found in SiYuan up to 3.5.x. It has been classified as critical. Affected is an unknown function of the file /api/network/forwardProxy of the component Endpoint. This manipulation causes server-side request forgery.

This vulnerability is registered as CVE-2026-32110. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.