Siyuan-note vulnerabilities
220 CVEs and advisories name Siyuan-note as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-72799SiYuan before v3.7.4 Information Disclosure via Path Resolution
- CVE-2026-72798SiYuan before v3.7.4 Information Disclosure via renderAttributeView
- CVE-2026-72797SiYuan before v3.7.4 Information Disclosure via getEncryptedNotebookStatus
- CVE-2026-72796SiYuan before v3.7.4 Access Control Bypass via Static Routes
- CVE-2026-72795SiYuan before v3.7.4 Information Disclosure via Embed Block
- CVE-2026-72794siyuan before v3.7.4 Session Cookie Key Disclosure via getConf
- CVE-2026-72793SiYuan before v3.7.4 Information Disclosure via /api/system/getConf
- CVE-2026-72792SiYuan before v3.7.4 Information Disclosure via Tag API
- CVE-2026-72791SiYuan v3.7.4-alpha.1 Information Disclosure via getAttributeViewFieldViews
- CVE-2026-72790SiYuan before v3.7.4 Information Disclosure via getNotebookInfo
- CVE-2026-72789SiYuan before v3.7.4 Authentication Bypass via Encrypted Notebooks
- CVE-2026-72788SiYuan before v3.7.4 Information Disclosure via UILayout Filter
- CVE-2026-69086SiYuan before v3.7.3 Path Traversal via unvalidated avID
- CVE-2026-69085SiYuan before v3.7.3 SQL Injection via searchDocs
- CVE-2026-69084SiYuan before v3.7.3 SQL Injection via searchEmbedBlock
- CVE-2026-69083SiYuan before v3.7.3 SQL Injection via fullTextSearchAssetContent
- CVE-2026-68587SiYuan before v3.7.3 Information Disclosure via getHeading*Transaction
- CVE-2026-68586SiYuan before v3.7.3 Content Disclosure via getBacklinkDoc
- CVE-2026-68585SiYuan before v3.7.3 Metadata Disclosure via getBlockInfo
- CVE-2026-68584SiYuan before v3.7.3 Authentication Bypass via Content Endpoints
- CVE-2026-66396SiYuan before v3.7.2 Stored XSS to RCE via title-img IAL
- CVE-2026-66395SiYuan Desktop before v3.7.2 Reflected XSS to RCE via siyuan Protocol
- CVE-2026-66394SiYuan before v3.7.3 Stored and Reflected XSS via SVG Sanitizer Bypass
- CVE-2026-66012SiYuan before v3.7.2 Unauthenticated Administrator Takeover via MCP
- CVE-2026-65607SiYuan before v3.7.2 Path Traversal via /export/temp/
- CVE-2026-65606SiYuan before v3.7.2 Cross-Site Scripting to RCE
- CVE-2026-65605SiYuan before v3.7.2 Stored XSS to RCE via Attribute View
- CVE-2026-59854SiYuan: Incomplete IsSensitivePath denylist: globalCopyFiles reads home-dir credential dotfiles into the workspace
- CVE-2026-59853SiYuan: Publish-mode Reader can exfiltrate private saved-search Criteria via /api/storage/getCriteria (missing publish-access filter)
- CVE-2026-59855SiYuan: Store XSS To Rce via Asset.render