CVE-2026-126264

SiYuan versions before 3.8.9 are vulnerable to an information disclosure vulnerability. Authenticated Reader users can bypass the sensitive-path guard in the /api/file/getFile endpoint to retrieve credential-named widget files. By requesting specific paths such as /data/widgets//credentials.json ...

GO-2026-4592 SiYuan's direct SQL Query API accessible to Reader-level users enables unauthorized database access in github.com/siyuan-note/siyuan/kernel

SiYuan's direct SQL Query API accessible to Reader-level users enables unauthorized database access in github.com/siyuan-note/siyuan/kernel...

Critical: Red Hat Security Advisory: acroread security update

Updated acroread packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...