Vulnerabilidades en siyuan-note
220 resultadosCVE-2026-72796MEDIUMSiYuan before v3.7.4 Access Control Bypass via Static RoutesEPSS 0.4%CVE-2026-72808MEDIUMSiYuan before v3.7.4 Information Disclosure via getFileAnnotationEPSS 0.4%CVE-2026-82650MEDIUMSiYuan before v3.8.1 Path Traversal via /api/template/renderEPSS 0.4%CVE-2026-34585HIGHSiYuan: Stored XSS in imported .sy.zip content leads to arbitrary command executionEPSS 0.3%CVE-2026-87810MEDIUMSiyuan before v3.8.2 Information Disclosure via fullTextSearchBlockEPSS 0.3%CVE-2026-30926HIGHSiYuan Note publish service authorization bypass allows low-privilege users to modify notebook contentEPSS 0.3%CVE-2026-73630MEDIUMSiYuan before v3.7.4 Information Disclosure via authFilePublishAccessEPSS 0.3%CVE-2026-82652MEDIUMSiYuan before v3.8.1 Information Disclosure via Publish AccessEPSS 0.3%CVE-2026-66394CRITICALSiYuan before v3.7.3 Stored and Reflected XSS via SVG Sanitizer BypassEPSS 0.3%CVE-2026-72807HIGHSiYuan before v3.7.4 SQL Injection via queryBlocks templateEPSS 0.3%CVE-2026-100635HIGHSiYuan before v3.8.4 Authentication Bypass via Plaintext Session CookieEPSS 0.3%CVE-2026-54759HIGHSiYuan: Lute HTML sanitizer allows `<iframe>` tags in Bazaar package README, leading to arbitrary command execution via SiYuan Electron clientEPSS 0.3%CVE-2026-73606MEDIUMSiYuan before v3.7.4 Information Disclosure via getRefIDsEPSS 0.3%CVE-2026-72800MEDIUMSiYuan before v3.7.4 Information Disclosure via Unfiltered APIEPSS 0.3%CVE-2026-72791MEDIUMSiYuan v3.7.4-alpha.1 Information Disclosure via getAttributeViewFieldViewsEPSS 0.3%CVE-2026-73605MEDIUMSiYuan before v3.7.4 Path Traversal via getUniqueFilenameEPSS 0.3%CVE-2026-72792MEDIUMSiYuan before v3.7.4 Information Disclosure via Tag APIEPSS 0.3%CVE-2026-85175HIGHSiYuan before v3.8.2 TLS Private Key Disclosure via getFileEPSS 0.3%CVE-2026-72794CRITICALsiyuan before v3.7.4 Session Cookie Key Disclosure via getConfEPSS 0.3%CVE-2026-72790MEDIUMSiYuan before v3.7.4 Information Disclosure via getNotebookInfoEPSS 0.3%