CVE-2026-85578

SiYuan through 3.8.1 contains an authorization bypass in the /api/file/getFile endpoint. Attackers with reader role can retrieve files from notebooks explicitly configured as Visible:false , gaining access to private workspace files including notebook metadata and internal configuration by knowin...

EUVD-2026-71001

SiYuan through 3.8.1 contains an authorization bypass vulnerability in the /api/file/getFile endpoint that allows readers to retrieve files from notebooks explicitly configured as Visible:false. Attackers with reader role can access private workspace files including notebook metadata and internal...

CVE-2026-85579 SiYuan before v3.8.2 Information Disclosure via undoState

SiYuan is affected by an information disclosure vulnerability confirmed in v3.8.1, fixed in v3.8.2 in the reader-accessible POST /api/transactions/undoState endpoint. The endpoint returns the peekMutatedRootIDs list from the global undo-log stack for a caller-supplied root ID without applying...

CVE-2026-85578 SiYuan through 3.8.1 Authorization Bypass via getFile

SiYuan through 3.8.1 contains an authorization bypass vulnerability in the /api/file/getFile endpoint that allows readers to retrieve files from notebooks explicitly configured as Visible:false. Attackers with reader role can access private workspace files including notebook metadata and internal...

CVE-2026-85578 SiYuan through 3.8.1 Authorization Bypass via getFile

SiYuan through 3.8.1 contains an authorization bypass vulnerability in the /api/file/getFile endpoint that allows readers to retrieve files from notebooks explicitly configured as Visible:false. Attackers with reader role can access private workspace files including notebook metadata and internal...

PT-2026-85716

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the VXLAN implementation where a filtered bulk flush of the Forwarding Database FDB can lead to an invalid pointer. This occurs when the vxlan fdb dst destroy function...

CVE-2026-80838: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: vxlan: keep the last remote linked during FDB flush A non-nexthop FDB entry is expected to have at least one remote while it remains reachable through the FDB hash table. A filtered bulk flush violates this invariant when every...

CVE-2026-85698: Out-of-bounds Read

Turso through 0.8.0-pre.8 contains an out-of-bounds read vulnerability in the table-leaf page reader that uses an attacker-controlled cell-count field without bounds validation. Attackers can craft a malicious database file with a modified cell count value to trigger an index-out-of-bounds panic...

CVE-2026-85699: Server-Side Request Forgery (SSRF)

jina-ai reader contains a server-side request forgery vulnerability where URL validation is performed only on the initial request but not re-applied to subsequent redirect hops. Attackers can craft a public URL that redirects to internal network addresses or cloud metadata endpoints, allowing the...

PT-2026-85478

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.2 Description An authorization bypass exists in the '/api/file/getFile' endpoint. Users with a reader role can retrieve files from notebooks configured as Visible:false if they know the hidden notebook identifier a...

CVE-2026-85579: Authorization Bypass Through User-Controlled Key

SiYuan is affected by an information disclosure vulnerability confirmed in v3.8.1, fixed in v3.8.2 in the reader-accessible POST /api/transactions/undoState endpoint. The endpoint returns the peekMutatedRootIDs list from the global undo-log stack for a caller-supplied root ID without applying...

PT-2026-85585

jina-ai reader contains a server-side request forgery vulnerability where URL validation is performed only on the initial request but not re-applied to subsequent redirect hops. Attackers can craft a public URL that redirects to internal network addresses or cloud metadata endpoints, allowing the...

Linux Distros Unpatched Vulnerability : CVE-2026-80764

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcievent: fix LE list UAF on reset hciccreset clears the LE accept and resolving lists without taking hdev-lock. Other command-complete handlers...

CVE-2026-85578: Missing Authorization

SiYuan through 3.8.1 contains an authorization bypass vulnerability in the /api/file/getFile endpoint that allows readers to retrieve files from notebooks explicitly configured as Visible:false. Attackers with reader role can access private workspace files including notebook metadata and internal...

PT-2026-85584

Name of the Vulnerable Software and Affected Versions Turso versions prior to 0.8.0-pre.9 Description An out-of-bounds read exists in the table-leaf page reader. The issue occurs because the system uses a cell-count field controlled by an attacker without performing bounds validation. A remote...

PT-2026-85483

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.2 Description A path traversal issue exists in the file-read endpoint accessible to users with the reader role. The system follows symbolic links symlinks when opening authorized asset paths under data/assets/. Thi...

CVE-2026-85583: Improper Link Resolution Before File Access

SiYuan versions before v3.8.2 contain a path traversal vulnerability in the reader-accessible file-read endpoint that follows symlinks when opening authorized asset paths. Attackers with reader role can request a logical asset under data/assets/ that is a symlink to a file outside the workspace a...

EUVD-2026-57460

SiYuan: Missing publish-access filter on getAttributeViewKeysByID discloses database column schema, plus two unscoped block-ID enumeration oracles publish mode...

EUVD-2026-58625

SiYuan: Publish-boundary bypass via WebSocket broadcast: anonymous readers receive a live unfiltered feed of all edits including protected/forbidden documents publish mode...

GHSA-MW8R-MW84-88V2 SiYuan: Publish-boundary bypass via WebSocket broadcast: anonymous readers receive a live unfiltered feed of all edits including protected/forbidden documents (publish mode)

CVE: This vulnerability corresponds to CVE-2026-72810. Summary WebSocket sessions established through the publish surface port 6808, RoleReader anonymous when Publish.Auth.Enable is false are added to the same broadcast session pool as authenticated sessions. The kernel's broadcast functions push...