medium
SiYuan: Missing consistency check between packageName and repoURL/repoHash in bazaar package install allows overwriting an existing, trusted plugin
GHSA-rpx2-p6hp-x5gj · CVE-2026-62204
high
SiYuan: A parser differential between the WebSocket keepalive exemption and the session quarantine allows unauthenticated access to the broadcast event stream
GHSA-c8w8-3pqp-wr83 · CVE-2026-73054
medium
SiYuan: authFilePublishAccess distinguishes hidden and forbidden documents from public and nonexistent ones, and issues a publish-auth cookie for documents it reports as forbidden
GHSA-4pjg-x8qj-33j5 · CVE-2026-73630
medium
SiYuan: The publish filter for database backlinks consults the forbidden list instead of the visibility list, disclosing hidden-tier documents to anonymous readers
GHSA-p4qw-vx5p-g984 · CVE-2026-73049
medium
SiYuan: The publish filter for local storage returns the administrator's entire storage map with only three keys sanitized
GHSA-xp3q-r38w-vgqm
medium
SiYuan: TLS Private Keys Readable via getFile (Incomplete Blocklist)
GHSA-4wwp-f6gw-6qm5
medium
SiYuan: /history/*path and /repo/diff/*path potentially exposing historical snapshots of data/.siyuan/publishAccess.json and data/templates/*
GHSA-3cm4-ccvw-6xr6
high
SiYuan Agent Tools SSRF via DNS-Rebinding TOCTOU (Bypass of CheckHostSSRF)
GHSA-x8gv-g2g3-65fj
medium
SiYuan MCP asset.upload Reads Arbitrary Absolute File Paths (Workspace Boundary Bypass)
GHSA-p23f-cm6q-2qp8
high
SiYuan: 17 block metadata/content endpoints in kernel/api/block.go have zero publish-access filtering, reachable by anonymous publish-mode readers
GHSA-4vpg-gwqq-w44c · CVE-2026-74904
low
SiYuan: Cross-Site WebSocket Hijacking on the admin-only network proxy endpoint (`/ws/network/proxy`) via explicit `CheckOrigin: true` bypass
GHSA-3cc2-h3v6-rqpq · CVE-2026-74802
medium
SiYuan: The reference filter for getRefIDs checks visibility but not the password tier, disclosing that password-protected documents reference a given block
GHSA-vg99-7gj7-2fr5 · CVE-2026-73606
high
SiYuan: getAttributeViewSearchTarget returns database row content to anonymous readers with no publish-access check, reopening the class closed one day earlier at the adjacent route
GHSA-9cqf-hhrq-7v45
medium
SiYuan: getBookmarkLabels returns every bookmark label in the workspace to anonymous readers, with no publish-access filtering
GHSA-j4ph-9xwf-wcj4 · CVE-2026-73609
medium
SiYuan: getUniqueFilename passes an unvalidated client-supplied path to the filesystem, giving anonymous readers an existence oracle over the entire host filesystem
GHSA-hf8h-97gm-4x2p · CVE-2026-73605
medium
SiYuan: Outline state for any document, including documents forbidden to readers, is returned by /api/storage/getOutlineStorage with no access check
GHSA-53fp-9jmv-227g · CVE-2026-73607
medium
SiYuan discloses an administrator's open documents and search terms to anonymous readers
GHSA-hgfg-j9pg-43xw · CVE-2026-72788
critical
SiYuan: Unauthenticated SQL injection in searchDocs via unescaped keyword (publish mode): cross-notebook read/write with statement stacking
GHSA-33jq-p8c2-q3q4 · CVE-2026-69085
high
SiYuan: The publish-access gate treats encrypted notebooks as publicly accessible by default, allowing anonymous readers to retrieve fully decrypted document content while a notebook is unlocked
GHSA-v684-q882-jgmq · CVE-2026-72789
medium
SiYuan: Notebook name, document count, size and timestamps are returned for any notebook, including notebooks hidden from readers, by /api/notebook/getNotebookInfo
GHSA-74pj-6g7r-j55c · CVE-2026-72790
