CVE-2026-73609

SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getBookmarkLabels endpoint that returns all bookmark labels in the workspace without publish-access filtering. Anonymous readers and publish-mode readers can obtain the complete bookmark vocabulary across the...

CVE-2026-73609

SiYuan versions before v3.7.4 are affected by an information disclosure vulnerability in the getBookmarkLabels endpoint, which returns all bookmark labels in a workspace without publish-access filtering. Anonymous readers and publish-mode readers can obtain the complete bookmark vocabulary across...

EUVD-2026-57813

SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getBookmarkLabels endpoint that returns all bookmark labels in the workspace without publish-access filtering. Anonymous readers and publish-mode readers can obtain the complete bookmark vocabulary across the...