siyuan-note/siyuan Security Advisories

critical2026-09-03

SiYuan: SQL injection in backlink/mention search via unescaped stored and client input (publish mode): first-order (client keyword) and second-order (stored document title) breakout on read-write handle

GHSA-q2vg-7qgx-x5fc · CVE-2026-72811

medium2026-09-03

SiYuan: Missing authorization on refreshBacklink allows anonymous readers to trigger persistent server-side writes and unauthenticated resource amplification (publish mode)

GHSA-wgwx-479j-23vq · CVE-2026-72812

high2026-09-03

SiYuan: Anonymous publish-password authentication bypass via getHeadingChildrenDOM / getHeading*Transaction / getBacklinkDoc (publish mode)

GHSA-7j72-f6wg-cxw6 · CVE-2026-68584

medium2026-09-03

SiYuan: Cross-boundary metadata disclosure via getBlockInfo (publish mode): reader-reachable document title/root info for publish-forbidden docs; sibling getDocInfo is filtered

GHSA-pm3w-vxp9-ccwc · CVE-2026-68585

high2026-09-03

SiYuan: Cross-boundary content disclosure via getBacklinkDoc/getBackmentionDoc (publish mode): reader-reachable rendered DOM of publish-forbidden docs; sibling list endpoints are filtered

GHSA-36v8-mpjm-8j5r · CVE-2026-68586

high2026-09-03

SiYuan: Full-content disclosure of publish-disabled documents via getHeading*Transaction endpoints (publish mode): reader-reachable rendered DOM with no publish-access check

GHSA-69mh-gvh4-8gp7 · CVE-2026-68587

critical2026-09-03

SiYuan: Unauthenticated SQL execution and REGEXP injection via fullTextSearchAssetContent (publish mode): reader-reachable raw SQL (method 2) and unescaped REGEXP (method 3) on read-write asset-content DB

GHSA-fph3-ghq9-vw66 · CVE-2026-69083

high2026-09-03

SiYuan: Path Traversal via unvalidated avID in RenderAttributeView/AV read endpoints : reader-reachable cross-scope attribute-view disclosure

GHSA-7hm9-v7vf-7g4w · CVE-2026-69086

critical2026-09-03

SiYuan: Unauthenticated arbitrary SQL execution via searchEmbedBlock (publish mode) : reader-reachable raw statement on read-write handle, cross-notebook read/write

GHSA-vh22-h7hf-www7 · CVE-2026-69084

medium2026-09-03

SiYuan: path traversal via /export/temp/ short-circuit branch (incomplete fix for the export-disclosure hardening, GHSA-6865-qjcf-286f)

GHSA-gw25-m53r-qh88

high2026-09-03

SiYuan: Stored and reflected XSS in SiYuan through an SVG sanitizer bypass

GHSA-99rq-75j6-5j9f

high2026-09-02

Siyuan: Authenticated path traversal in /snippets/ static handler (serveSnippets) leaks conf/conf.json secrets and siyuan.db

GHSA-275h-v5h9-vr82 · CVE-2026-59832

high2026-09-02

SiYuan: SQL Query in Block Search Exposes Hidden Published Document Content

GHSA-h89q-4j2h-7h88 · CVE-2026-59834

critical2026-07-10

SiYuan: Stored XSS to RCE via Unsanitized Attribute View Asset Cell Content

GHSA-56mp-4f3v-fgj2 · CVE-2026-50551

critical2026-07-10

SiYuan: Stored XSS to RCE via attribute-view cell rendering in genAVValueHTML()

GHSA-5xfx-xj4h-5p7r · CVE-2026-54158

high2026-07-10

SiYuan: Stored XSS in Bazaar marketplace via package README event handlers

GHSA-w7cg-whh7-xp28 · CVE-2026-54070

critical2026-07-10

SiYuan: Unauthenticated Admin API Access via Blanket chrome-extension:// Origin Allowlist

GHSA-hvr9-72v2-fff3 · CVE-2026-54069

medium2026-07-10

SiYuan: Unauthenticated SQLite Data Exfiltration via Template Injection in /api/icon/getDynamicIcon

GHSA-gcm7-57gf-953c · CVE-2026-54068

critical2026-07-10

SiYuan: Stored XSS to RCE via CSS-snippet <style> breakout in renderSnippet()

GHSA-mvjr-vv3c-w4qv · CVE-2026-54067

high2026-07-10

SiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read), Incomplete fix of CVE-2026-41894

GHSA-p4m3-mgmm-c664 · CVE-2026-54066