SiYuan <= v3.6.1 - Bookmark Data Disclosure

SiYuan v3.6.2 contains an information disclosure vulnerability caused by improper authorization checks in the publish service's bookmark filtering, letting unauthenticated visitors access bookmarked blocks from password-protected documents, exploit requires access to the publish service. id:...

SiYuan Note <= 3.6.5 - Authentication Bypass

SiYuan Note 3.6.5 and prior is vulnerable to authentication bypass. The CheckAuth middleware unconditionally trusted all chrome-extension:// origins, granting RoleAdministrator access without token validation to any request with a spoofed Origin header. Fixed in v3.7.0. id: CVE-2026-54069 info:...

SiYuan - SQL Execution

SiYuan = v3.7.2 contains a SQL injection caused by passing client-supplied SQL statements verbatim to the main read-write database handle in /api/search/searchEmbedBlock, letting attackers with publish RoleReader token or anonymous access read and modify content, exploit requires publish RoleRead...

SiYuan <= v3.6.1 - Path Traversal

SiYuan is a personal knowledge management system. Prior to version 3.6.2, the Siyuan kernel exposes an unauthenticated file-serving endpoint under /appearance/filepath. Due to improper path sanitization, attackers can perform directory traversal and read arbitrary files accessible to the server...

SiYuan <= v3.5.9 - SVG Animate Element XSS

SiYuan = v3.5.9 contains a reflected XSS caused by insufficient SVG sanitization allowing SVG animation elements to inject executable JavaScript in /api/icon/getDynamicIcon endpoint, letting unauthenticated attackers execute scripts. id: CVE-2026-31807 info: name: SiYuan = v3.5.9 - SVG Animate...

SiYuan <= 3.6.5 - Unauthenticated Path Traversal

SiYuan = 3.6.5 contains a path traversal via double URL-encoding in the /assets/ route publish mode port 6808, allowing unauthenticated attackers to read arbitrary files inside WorkspaceDir including conf/conf.json which exposes the API token and access auth code. id: CVE-2026-54066 info: name:...

SiYuan Note - Cross-Site Scripting

Unauthenticated reflected cross-site scripting XSS vulnerability in all versions of SiYuan Note containing /api/icon/getDynamicIcon with unsafe type=8 rendering logic. Attacker-controlled content is inserted directly into SVG output without proper sanitization. An attacker can execute arbitrary...

SiYuan <=3.7.2 - SQL Injection

SiYuan before v3.7.3 contains a SQL injection caused by direct concatenation of the keyword parameter in /api/filetree/searchDocs endpoint, letting attackers with publish RoleReader token or unauthenticated in publish mode read and modify database content. id: CVE-2026-69085 info: name: SiYuan...

SiYuan <= v3.5.9 - Cross Site Scripting

SiYuan v3.5.10 contains a reflected XSS caused by improper sanitization of javascript: href attributes allowing ASCII control characters to bypass prefix checks in SVG sanitizer, letting unauthenticated attackers execute JavaScript via /api/icon/getDynamicIcon. id: CVE-2026-31809 info: name: SiYu...

CVE-2026-100633

CVE-2026-100633 — SiYuan Rapport de vulnérabilité publié. L'enregistrement CVE officiel crédite dpfkdlemtp en tant que Reporter. Enregistrement CVE officiel Avis de sécurité GitHub publié GHSA-9g6v-r3xf-673q Portfolio CVE sur mon profil GitHub Clarification sur l'attribution du CVE Le personnel d...

CVE-2026-69084-PoC

CVE-2026-69084 / CVE-2026-69085 — Exécution SQL arbitraire et injection SQL dans SiYuan CVE-2026-69084 : Exécution SQL arbitraire via /api/search/searchEmbedBlock CVE-2026-69085 : Injection SQL via /api/filetree/searchDocs CVSS 9.9 Critique chacune · CWE-89 · SiYuan = v3.7.2 corrigé dans v3.7.3...

CVE-2026-69083_exploit

CVE-2026-69083 — Injection SQL non authentifiée dans SiYuan Injection SQL non authentifiée dans SiYuan une application de base de connaissances basée sur Go via le point de terminaison de recherche du contenu des actifs. POST /api/search/fullTextSearchAssetContent construit une instruction SQL...

siyuan-mcp-admin-takeover-cve-2026-66012-missing-authorization

CVE-2026-66012 — Prise de contrôle administrateur non authentifiée de SiYuan MCP Preuve de concept pour CVE-2026-66012 CVSS 10.0 Critique, une vulnérabilité d'absence d'autorisation dans le point de terminaison MCP Model Context Protocol de SiYuan qui permet à un attaquant non authentifié de...

GO-2026-6662 SiYuan: /history/*path and /repo/diff/*path potentially exposing historical snapshots of data/.siyuan/publishAccess.json and data/templates/* in github.com/siyuan-note/siyuan/kernel

SiYuan: /history/path and /repo/diff/path potentially exposing historical snapshots of data/.siyuan/publishAccess.json and data/templates/ in github.com/siyuan-note/siyuan/kernel...

GO-2026-6663 SiYuan: TLS Private Keys Readable via getFile (Incomplete Blocklist) in github.com/siyuan-note/siyuan/kernel

SiYuan: TLS Private Keys Readable via getFile Incomplete Blocklist in github.com/siyuan-note/siyuan/kernel...

GO-2026-6655 SiYuan MCP asset.upload Reads Arbitrary Absolute File Paths (Workspace Boundary Bypass) in github.com/siyuan-note/siyuan/kernel

SiYuan MCP asset.upload Reads Arbitrary Absolute File Paths Workspace Boundary Bypass in github.com/siyuan-note/siyuan/kernel...

GO-2026-6657 SiYuan Agent Tools SSRF via DNS-Rebinding TOCTOU (Bypass of CheckHostSSRF) in github.com/siyuan-note/siyuan/kernel

SiYuan Agent Tools SSRF via DNS-Rebinding TOCTOU Bypass of CheckHostSSRF in github.com/siyuan-note/siyuan/kernel...

GO-2026-6650 SiYuan: Cross-Site WebSocket Hijacking on the admin-only network proxy endpoint (`/ws/network/proxy`) via explicit `CheckOrigin: true` bypass in github.com/siyuan-note/siyuan/kernel

SiYuan: Cross-Site WebSocket Hijacking on the admin-only network proxy endpoint /ws/network/proxy via explicit CheckOrigin: true bypass in github.com/siyuan-note/siyuan/kernel...

GO-2026-6654 SiYuan: 17 block metadata/content endpoints in kernel/api/block.go have zero publish-access filtering, reachable by anonymous publish-mode readers in github.com/siyuan-note/siyuan/kernel

SiYuan: 17 block metadata/content endpoints in kernel/api/block.go have zero publish-access filtering, reachable by anonymous publish-mode readers in github.com/siyuan-note/siyuan/kernel...

GO-2026-6621 SiYuan: Unauthenticated SQL injection in searchDocs via unescaped keyword (publish mode): cross-notebook read/write with statement stacking in github.com/siyuan-note/siyuan/kernel

SiYuan: Unauthenticated SQL injection in searchDocs via unescaped keyword publish mode: cross-notebook read/write with statement stacking in github.com/siyuan-note/siyuan/kernel...