CVE-2026-73608

creationtimestamp| type| source ---|---|--- 2026-08-13 14:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msxsjjfi3v25...

CVE-2026-73608

SiYuan has a missing-authorization vulnerability in the development branch for the /api/av/getAttributeViewSearchTarget endpoint. The route is protected only by CheckAuth and performs no further authorization checks, allowing anonymous readers to query with a database identifier and a keyword to ...