GO-2026-6624 SiYuan: Outline state for any document, including documents forbidden to readers, is returned by /api/storage/getOutlineStorage with no access check in github.com/siyuan-note/siyuan/kernel

SiYuan: Outline state for any document, including documents forbidden to readers, is returned by /api/storage/getOutlineStorage with no access check in github.com/siyuan-note/siyuan/kernel...

GHSA-53FP-9JMV-227G SiYuan: Outline state for any document, including documents forbidden to readers, is returned by /api/storage/getOutlineStorage with no access check

Summary /api/storage/getOutlineStorage is registered with CheckAuth only and performs no authorization of any kind. Given a document identifier it returns that document's stored outline state, regardless of the document's publish tier. The two write endpoints for the same data, setOutlineStorage...

GHSA-V372-PHQ5-6MX6 Duplicate Advisory: Outline state for any document, including documents forbidden to readers, is returned by /api/storage/getOutlineStorage with no access check

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-53fp-9jmv-227g. This link is maintained to preserve external references. Original Description SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/storage/getOutlineStorage...

Duplicate Advisory: Outline state for any document, including documents forbidden to readers, is returned by /api/storage/getOutlineStorage with no access check

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-53fp-9jmv-227g. This link is maintained to preserve external references. Original Description SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/storage/getOutlineStorage...

CVE-2026-73607: Missing Authorization

SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/storage/getOutlineStorage endpoint that performs no authorization checks. Attackers can retrieve outline state including heading identifiers for any document by supplying its identifier, even for documents...

PT-2026-105540

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-53fp-9jmv-227g. This link is maintained to preserve external references. Original Description SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/storage/getOutlineStorage...

CVE-2025-65112: Missing Authorization

PubNet is a self-hosted Dart & Flutter package service. Prior to version 1.1.3, the /api/storage/upload endpoint in PubNet allows unauthenticated users to upload packages as any user by providing arbitrary author-id values. This enables identity spoofing, privilege escalation, and supply chain...

EUVD-2023-2824

Malicious code in bioql PyPI...

Yamcs Path Traversal Vulnerability

Yamcs is an open source software framework from Yamcs Open Source. It is used to command and control spacecraft, satellites, payloads, ground stations and ground equipment. A security vulnerability exists in Yamcs version 5.8.6, which stems from a directory traversal vulnerability in the API...

PT-2023-29481

Name of the Vulnerable Software and Affected Versions Yamcs version 5.8.6 Description The issue allows attackers to delete arbitrary files via crafted HTTP DELETE request to the storage functionality of the API. This is achieved through a Directory Traversal vulnerability. Recommendations For Yam...

CVE-2022-35569

Blogifier v3.0 was discovered to contain an arbitrary file upload vulnerability at /api/storage/upload/PostImage. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted file...

CVE-2022-35569: Improper Neutralization of Input During Web Page Generation

Blogifier v3.0 was discovered to contain an arbitrary file upload vulnerability at /api/storage/upload/PostImage. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted file...

PT-2022-22906

Name of the Vulnerable Software and Affected Versions Blogifier version 3.0 Description The issue allows attackers to execute arbitrary web scripts or HTML via a crafted file, exploiting an arbitrary file upload vulnerability at the /api/storage/upload/PostImage API endpoint. This enables attacke...

Unitrends Backup api/storage input validation vulnerability

Added: 11/29/2017 Background Unitrends Backup is an enterprise backup, ransomware detection, and cloud continuity solution. Problem Unitrends Backup does not properly validate the hostname parameter in a JSON request to the api/storage resource, allowing a remote attacker to bypass authentication...

CVE-2017-12478: Improper Authentication

It was discovered that the api/storage web interface in Unitrends Backup UB before 10.0.0 has an issue in which one of its input parameters was not validated. A remote attacker could use this flaw to bypass authentication and execute arbitrary commands with root privilege on the target system...

PT-2017-2842

Name of the Vulnerable Software and Affected Versions Unitrends Backup versions prior to 10.0.0 Description The issue is related to the api/storage web interface, where an input parameter was not validated, allowing a remote attacker to bypass authentication and execute arbitrary commands with ro...