CVE-2026-73054

CVE-2026-73054 affects SiYuan versions before v3.7.4. The vulnerability is an authentication bypass in the WebSocket endpoint caused by differential parsing of query parameters between authentication exemption and session quarantine checks. Unauthenticated attackers can craft a malicious WebSocke...