SUSE CVE-2026-72797

SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getEncryptedNotebookStatus endpoint that returns encrypted notebook identifiers, names, and lock states without publish-access filtering. Anonymous readers and publish-mode accounts can enumerate all encrypted...

GO-2026-6414 SiYuan: getEncryptedNotebookStatus discloses names and current lock/unlock state of all encrypted notebooks to anonymous readers in github.com/siyuan-note/siyuan/kernel

SiYuan: getEncryptedNotebookStatus discloses names and current lock/unlock state of all encrypted notebooks to anonymous readers in github.com/siyuan-note/siyuan/kernel...

GHSA-RCHC-G58M-88JM Duplicate Advisory: getEncryptedNotebookStatus discloses names and live unlock state of all encrypted notebooks to anonymous readers

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-f2rw-w22v-54vh. This link is maintained to preserve external references. Original Description SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getEncryptedNotebookStatus...

CVE-2026-72797

SiYuan prior to v3.7.4 contains an information-disclosure vulnerability in the getEncryptedNotebookStatus endpoint. The endpoint returns encrypted notebook identifiers, names, and lock states without publish-access filtering, allowing anonymous readers and publish-mode accounts to enumerate all e...

CVE-2026-72797: Missing Authorization

SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getEncryptedNotebookStatus endpoint that returns encrypted notebook identifiers, names, and lock states without publish-access filtering. Anonymous readers and publish-mode accounts can enumerate all encrypted...