CVE-2026-85585

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.2

Description The request-concurrency middleware contains an unbounded resource consumption issue where mutex entries are retained for every unique request path without an eviction mechanism. Unauthenticated attackers can exploit this by sending a large number of unique request paths, leading to a permanent increase in process memory and synchronization overhead, which degrades system availability.

Recommendations Update to version 3.8.2 or later.