SiYuan <= v3.5.9 - Cross Site Scripting

SiYuan v3.5.10 contains a reflected XSS caused by improper sanitization of javascript: href attributes allowing ASCII control characters to bypass prefix checks in SVG sanitizer, letting unauthenticated attackers execute JavaScript via /api/icon/getDynamicIcon. id: CVE-2026-31809 info: name: SiYu...

SiYuan <= v3.6.1 - Bookmark Data Disclosure

SiYuan v3.6.2 contains an information disclosure vulnerability caused by improper authorization checks in the publish service's bookmark filtering, letting unauthenticated visitors access bookmarked blocks from password-protected documents, exploit requires access to the publish service. id:...

SiYuan Note <= 3.6.5 - Authentication Bypass

SiYuan Note 3.6.5 and prior is vulnerable to authentication bypass. The CheckAuth middleware unconditionally trusted all chrome-extension:// origins, granting RoleAdministrator access without token validation to any request with a spoofed Origin header. Fixed in v3.7.0. id: CVE-2026-54069 info:...

SiYuan - SQL Execution

SiYuan = v3.7.2 contains a SQL injection caused by passing client-supplied SQL statements verbatim to the main read-write database handle in /api/search/searchEmbedBlock, letting attackers with publish RoleReader token or anonymous access read and modify content, exploit requires publish RoleRead...

SiYuan <= v3.6.1 - Path Traversal

SiYuan is a personal knowledge management system. Prior to version 3.6.2, the Siyuan kernel exposes an unauthenticated file-serving endpoint under /appearance/filepath. Due to improper path sanitization, attackers can perform directory traversal and read arbitrary files accessible to the server...

SiYuan <= v3.5.9 - SVG Animate Element XSS

SiYuan = v3.5.9 contains a reflected XSS caused by insufficient SVG sanitization allowing SVG animation elements to inject executable JavaScript in /api/icon/getDynamicIcon endpoint, letting unauthenticated attackers execute scripts. id: CVE-2026-31807 info: name: SiYuan = v3.5.9 - SVG Animate...

SiYuan <= 3.6.5 - Unauthenticated Path Traversal

SiYuan = 3.6.5 contains a path traversal via double URL-encoding in the /assets/ route publish mode port 6808, allowing unauthenticated attackers to read arbitrary files inside WorkspaceDir including conf/conf.json which exposes the API token and access auth code. id: CVE-2026-54066 info: name:...

SiYuan Note - Cross-Site Scripting

Unauthenticated reflected cross-site scripting XSS vulnerability in all versions of SiYuan Note containing /api/icon/getDynamicIcon with unsafe type=8 rendering logic. Attacker-controlled content is inserted directly into SVG output without proper sanitization. An attacker can execute arbitrary...

SiYuan <=3.7.2 - SQL Injection

SiYuan before v3.7.3 contains a SQL injection caused by direct concatenation of the keyword parameter in /api/filetree/searchDocs endpoint, letting attackers with publish RoleReader token or unauthenticated in publish mode read and modify database content. id: CVE-2026-69085 info: name: SiYuan...

CVE-2026-100633

CVE-2026-100633 — SiYuan 公開された脆弱性レポート。公式CVEレコードでは、dpfkdlemtp が 報告者 としてクレジットされています。 公式CVEレコード 公開されたGitHubセキュリティアドバイザリ GHSA-9g6v-r3xf-673q 私のGitHubプロフィール上のCVEポートフォリオ CVE割り当ての明確化...

CVE-2026-69084-PoC

CVE-2026-69084 / CVE-2026-69085 — SiYuan 任意SQL実行 & SQLインジェクション CVE-2026-69084: /api/search/searchEmbedBlock を介した任意SQL実行 CVE-2026-69085: /api/filetree/searchDocs を介したSQLインジェクション CVSS 9.9 Critical 各 · CWE-89 · SiYuan --check 2. DB書き込みの証明: CREATE TABLE + INSERT python3 CVE-2026-69084.py...

CVE-2026-69083_exploit

CVE-2026-69083 — SiYuan 未认证 SQL 注入 通过资产内容搜索端点，在 SiYuan（一个基于 Go 的知识库应用）中存在未认证 SQL 注入。 POST /api/search/fullTextSearchAssetContent 通过将用户控制的 query 值直接拼接进 REGEXP 子句（kernel/model/assetcontent.go，assetContentFieldRegexp）且不进行任何转义，从而构建出原始 SQL 语句： SELECT FROM assetcontentsftscaseinsensitive WHERE name...

siyuan-mcp-admin-takeover-cve-2026-66012-missing-authorization

CVE-2026-66012 — SiYuan MCP 未認証の管理者乗っ取り CVE-2026-66012 （CVSS 10.0 Critical）の概念実証（Proof of Concept）。SiYuan の MCP（Model Context Protocol）エンドポイントにおける認可欠落（missing-authorization）の脆弱性で、Publish サーバーが匿名モードで有効になっている場合、未認証の攻撃者が管理者権限を乗っ取り、リモートコード実行を達成できることを示します。 脆弱性の概要 フィールド| 値 ---|--- CVE| CVE-2026-66012...

GO-2026-6662 SiYuan: /history/*path and /repo/diff/*path potentially exposing historical snapshots of data/.siyuan/publishAccess.json and data/templates/* in github.com/siyuan-note/siyuan/kernel

SiYuan: /history/path and /repo/diff/path potentially exposing historical snapshots of data/.siyuan/publishAccess.json and data/templates/ in github.com/siyuan-note/siyuan/kernel...

GO-2026-6663 SiYuan: TLS Private Keys Readable via getFile (Incomplete Blocklist) in github.com/siyuan-note/siyuan/kernel

SiYuan: TLS Private Keys Readable via getFile Incomplete Blocklist in github.com/siyuan-note/siyuan/kernel...

GO-2026-6654 SiYuan: 17 block metadata/content endpoints in kernel/api/block.go have zero publish-access filtering, reachable by anonymous publish-mode readers in github.com/siyuan-note/siyuan/kernel

SiYuan: 17 block metadata/content endpoints in kernel/api/block.go have zero publish-access filtering, reachable by anonymous publish-mode readers in github.com/siyuan-note/siyuan/kernel...

GO-2026-6657 SiYuan Agent Tools SSRF via DNS-Rebinding TOCTOU (Bypass of CheckHostSSRF) in github.com/siyuan-note/siyuan/kernel

SiYuan Agent Tools SSRF via DNS-Rebinding TOCTOU Bypass of CheckHostSSRF in github.com/siyuan-note/siyuan/kernel...

GO-2026-6655 SiYuan MCP asset.upload Reads Arbitrary Absolute File Paths (Workspace Boundary Bypass) in github.com/siyuan-note/siyuan/kernel

SiYuan MCP asset.upload Reads Arbitrary Absolute File Paths Workspace Boundary Bypass in github.com/siyuan-note/siyuan/kernel...

GO-2026-6650 SiYuan: Cross-Site WebSocket Hijacking on the admin-only network proxy endpoint (`/ws/network/proxy`) via explicit `CheckOrigin: true` bypass in github.com/siyuan-note/siyuan/kernel

SiYuan: Cross-Site WebSocket Hijacking on the admin-only network proxy endpoint /ws/network/proxy via explicit CheckOrigin: true bypass in github.com/siyuan-note/siyuan/kernel...

GO-2026-6632 SiYuan: getAttributeViewSearchTarget returns database row content to anonymous readers with no publish-access check, reopening the class closed one day earlier at the adjacent route in github.com/siyuan-note/siyuan/kernel

SiYuan: getAttributeViewSearchTarget returns database row content to anonymous readers with no publish-access check, reopening the class closed one day earlier at the adjacent route in github.com/siyuan-note/siyuan/kernel...