Siyuan-note vulnerabilities
220 CVEs and advisories name Siyuan-note as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-123492SiYuan before 3.8.9 Nil Pointer Dereference DoS via MCP resources/read
- CVE-2026-118680SiYuan 3.8.7 through 3.8.8 Path Traversal via GLOBALROOT Alias
- CVE-2026-116171SiYuan 3.5.4 before 3.8.7 Sensitive Path Bypass via Windows Extended-Length Prefix
- CVE-2026-116170SiYuan before v3.8.7 SQL Injection via History Search op and query
- CVE-2026-116169SiYuan 2.10.0 before 3.8.7 Stored XSS via KaTeX \href in Math Blocks
- CVE-2026-116168SiYuan before v3.8.7 Path Traversal Local File Read via MCP Asset Tool
- CVE-2026-116167SiYuan 2.9.0 before 3.8.7 XSS via check-auth to Parameter
- CVE-2026-116166SiYuan 3.6.0 before 3.8.7 Cleartext Transmission via Unenforced networkServeTLS Setting
- CVE-2026-109310SiYuan v3.1.12 before v3.8.6 Denial of Service via getDynamicIcon Template
- CVE-2026-109309SiYuan v3.7.0 before v3.8.6 Arbitrary File Read via Plugin ResponseFile.Path
- CVE-2026-105205SiYuan before 3.8.5 Information Disclosure via /api/block/getDocInfo and getDocsInfo
- CVE-2026-104410SiYuan before 3.8.5 Information Disclosure via /api/export/preview
- CVE-2026-103763SiYuan before v3.8.5 Information Disclosure via /api/notebook/getNotebookInfo
- CVE-2026-103762SiYuan before v3.8.5 Missing Authorization in Save-Path Resolver Endpoints
- CVE-2026-101092SiYuan before v3.8.4 Information Disclosure via getCurrentAttrViewImages
- CVE-2026-101091SiYuan before v3.8.4 SQL Injection via Block Query Embed
- CVE-2026-100646SiYuan before v3.8.4 Authentication Bypass via Missing Origin Header
- CVE-2026-100645SiYuan 3.7.0 before 3.8.4 Stored XSS via Gallery Kanban
- CVE-2026-100644SiYuan before v3.8.4 SQL Injection via dailyNoteSavePath
- CVE-2026-100643SiYuan before v3.8.4 Stored XSS via Attribute View textarea
- CVE-2026-100642SiYuan v2.1.0 before v3.8.4 Cross-Site Request Forgery via CheckAuth
- CVE-2026-100641SiYuan before v3.8.4 Stored XSS via Unescaped Flashcard Content
- CVE-2026-100640SiYuan before v3.8.4 Clipboard Data Disclosure via IPC
- CVE-2026-100639SiYuan before v3.8.4 Cross-Site Scripting via Kramdown IAL
- CVE-2026-100638SiYuan before v3.8.4 Path Traversal via setNotebookIcon
- CVE-2026-100637SiYuan before v3.8.4 Path Traversal via checkoutRepo sessionID
- CVE-2026-100636SiYuan before v3.8.4 Path Traversal via exportBrowserHTML folder
- CVE-2026-100635SiYuan before v3.8.4 Authentication Bypass via Plaintext Session Cookie
- CVE-2026-100634SiYuan before v3.8.4 Missing Authorization via siyuan-send-windows
- CVE-2026-100633SiYuan 3.8.0 through 3.8.3 Path Traversal via MCP File Operations