medium
SiYuan: Database view structure (all view names, layout types and per-field visibility) is returned to anonymous readers by /api/av/getAttributeViewFieldViews
GHSA-57v5-wqx3-cgj4
medium
SiYuan: Tag labels from password-protected documents are returned to readers who have not entered the password
GHSA-mp7r-57w4-5qm3 · CVE-2026-72792
high
SiYuan: Non-administrator responses from /api/system/getConf omit three secrets that the configuration-export path explicitly strips, disclosing the session-cookie signing key and the OS username to anonymous readers
GHSA-h4v5-crx2-3cv4 · CVE-2026-72793
high
SiYuan: Embedded (transclusion) block content is returned without publish-access filtering, leaking private and password-protected document content to anonymous readers
GHSA-h6w7-xxcf-w2mq · CVE-2026-72795
high
SiYuan: The session-cookie signing key (Conf.CookieKey) is returned to anonymous readers by /api/system/getConf
GHSA-34fj-mwm6-fjfg · CVE-2026-72794
medium
SiYuan: Static-file routes bypass the publish-access controls enforced on the REST API, exposing templates, snippets and export artifacts to anonymous readers
GHSA-fgmr-7w36-9qfq · CVE-2026-72796
medium
SiYuan: getEncryptedNotebookStatus discloses names and current lock/unlock state of all encrypted notebooks to anonymous readers
GHSA-f2rw-w22v-54vh · CVE-2026-72797
high
SiYuan: Publish-access filter on renderAttributeView leaves related-database content unfiltered and fails open on non-block first columns
GHSA-mfrj-v65r-979c · CVE-2026-72798
medium
SiYuan: Missing publish-access filter on the HPath/path-resolution endpoints discloses the private document tree to anonymous readers
GHSA-5w7r-f4cg-rqq7 · CVE-2026-72799
medium
SiYuan: Missing publish-access filter on getAttributeViewKeysByID discloses database column schema, plus two unscoped block-ID enumeration oracles (publish mode)
GHSA-5fhr-f75j-8wr9 · CVE-2026-72800
high
SiYuan: Encrypted-notebook key-derivation material and wrapped notebook keys disclosed to anonymous readers, enabling offline master-password cracking
GHSA-8x84-r2ff-h8pq · CVE-2026-72801
medium
SiYuan: Absolute filesystem path and OS username disclosure via resolveAssetPath
GHSA-jv8v-xq2h-657v · CVE-2026-72802
medium
SiYuan: Missing publish-access filter on getBlockAttrs and batchGetBlockAttrs discloses block attributes (name, alias, memo, custom fields) of protected documents
GHSA-qvq9-hq6p-v378 · CVE-2026-72803
high
SiYuan: Graph endpoints omit the publish-password tier: anonymous readers receive block-level content of password-protected documents
GHSA-vpjw-wf5h-cgpq · CVE-2026-72804
medium
SiYuan: Missing publish-access check on getBlockBreadcrumb, getRefText, and getBlockTreeInfos discloses content and metadata of protected/forbidden documents
GHSA-67x2-mq63-v9vm · CVE-2026-72805
medium
SiYuan: Password (protected) tier omitted in the attribute-view/database publish filter: Reader receives rows of protected documents without the password (publish mode)
GHSA-6mcf-g667-w3qv · CVE-2026-72806
high
SiYuan: Second-order SSTI to arbitrary SQL via attribute-view template column (queryBlocks): malicious imported package executes SQL on victim kernel
GHSA-x67c-8pwr-m8g3 · CVE-2026-72807
medium
SiYuan: Missing publish-access filter on getFileAnnotation discloses private PDF annotations of forbidden/protected documents (publish mode)
GHSA-v7ph-r5r6-4jcj · CVE-2026-72808
high
SiYuan: Localhost-trust admin bypass on auth-code-gated endpoints, with potential remote reachability via the fixed-port proxy
GHSA-3mp7-4rh5-jrv9 · CVE-2026-72809
high
SiYuan: Publish-boundary bypass via WebSocket broadcast: anonymous readers receive a live unfiltered feed of all edits including protected/forbidden documents (publish mode)
GHSA-mw8r-mw84-88v2 · CVE-2026-72810
