CVE-2026-126266

SiYuan from 3.6.0 before 3.8.9 contains an information disclosure vulnerability that allows unauthenticated publish visitors to bypass per-document passwords via regex search in getDoc. Attackers can send POST requests to /api/filetree/getDoc with queryMethod 3 and a broad regex to read protected...

CVE-2026-126266

SiYuan versions 3.6.0 before 3.8.9 are susceptible to an information disclosure vulnerability. The flaw allows unauthenticated publish visitors to bypass per-document passwords by exploiting a regex search in the getDoc function. Specifically, an attacker can send POST requests to /api/filetree/g...

EUVD-2026-125255

SiYuan from 3.6.0 before 3.8.9 contains an information disclosure vulnerability that allows unauthenticated publish visitors to bypass per-document passwords via regex search in getDoc. Attackers can send POST requests to /api/filetree/getDoc with queryMethod 3 and a broad regex to read protected...

CVE-2026-126266 SiYuan from 3.6.0 before 3.8.9 Publish-Password Bypass via getDoc Regex Keywords

SiYuan from 3.6.0 before 3.8.9 contains an information disclosure vulnerability that allows unauthenticated publish visitors to bypass per-document passwords via regex search in getDoc. Attackers can send POST requests to /api/filetree/getDoc with queryMethod 3 and a broad regex to read protected...

PT-2026-146597

SiYuan from 3.6.0 before 3.8.9 contains an information disclosure vulnerability that allows unauthenticated publish visitors to bypass per-document passwords via regex search in getDoc. Attackers can send POST requests to /api/filetree/getDoc with queryMethod 3 and a broad regex to read protected...

libreoffice/slkfuzzer: Global-buffer-overflow in ScAttrArray::GetDoc

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5673715972440064 Project: libreoffice Fuzzer: libFuzzerlibreofficeslkfuzzer Fuzz target binary: slkfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...