| SiYuan: Path Traversal via Double URL Encoding in `/export/` Endpoint (Incomplete Fix Bypass for CVE-2026-30869)CVE-2026-41894 · GHSA-HJH7-R5W8-5872بازه‌ها نیاز به بررسی دارند. |
github.com/siyuan-note/siyuan/kernel |
Go |
زیاد
|
اصلاح گزارش شده |
|
| SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace filesCVE-2026-60083 · GHSA-C8R8-95HG-MP34بازه‌ها نیاز به بررسی دارند. |
github.com/siyuan-note/siyuan/kernel |
Go |
متوسط
|
اصلاح گزارش شده |
|
| SiYuan: The publish filter for local storage returns the administrator's entire storage map with only three keys sanitizedGHSA-XP3Q-R38W-VGQM · GO-2026-6836بازه‌ها نیاز به بررسی دارند. |
github.com/siyuan-note/siyuan/kernel |
Go |
متوسط
|
اصلاح گزارش شده |
|
| SiYuan: Missing consistency check between packageName and repoURL/repoHash in bazaar package install allows overwriting an existing, trusted pluginCVE-2026-62204 · GHSA-RPX2-P6HP-X5GJبازه‌ها نیاز به بررسی دارند. |
github.com/siyuan-note/siyuan/kernel |
Go |
متوسط
|
اصلاح گزارش شده |
|
| SiYuan: A parser differential between the WebSocket keepalive exemption and the session quarantine allows unauthenticated access to the broadcast event streamCVE-2026-73054 · GHSA-C8W8-3PQP-WR83بازه‌ها نیاز به بررسی دارند. |
github.com/siyuan-note/siyuan/kernel |
Go |
زیاد
|
اصلاح گزارش شده |
|
| SiYuan: authFilePublishAccess distinguishes hidden and forbidden documents from public and nonexistent ones, and issues a publish-auth cookie for documents it reports as forbiddenCVE-2026-73630 · GHSA-4PJG-X8QJ-33J5بازه‌ها نیاز به بررسی دارند. |
github.com/siyuan-note/siyuan/kernel |
Go |
متوسط
|
اصلاح گزارش شده |
|
| SiYuan: The publish filter for database backlinks consults the forbidden list instead of the visibility list, disclosing hidden-tier documents to anonymous readersCVE-2026-73049 · GHSA-P4QW-VX5P-G984بازه‌ها نیاز به بررسی دارند. |
github.com/siyuan-note/siyuan/kernel |
Go |
متوسط
|
اصلاح گزارش شده |
|
| SiYuan has an Incomplete Fix for IsSensitivePath Denylist Allows File Read from /opt, /usr, /home (GHSA-h5vh-m7fg-w5h6 Bypass)CVE-2026-33194 · GHSA-VM69-H85X-8P85بازه‌ها نیاز به بررسی دارند. |
github.com/siyuan-note/siyuan/kernel |
Go |
متوسط
|
اصلاح گزارش شده |
|
| SiYuan has a Full-Read SSRF via /api/network/forwardProxyCVE-2026-32110 · GHSA-56CV-C5P2-J2WGبازه‌ها نیاز به بررسی دارند. |
github.com/siyuan-note/siyuan/kernel |
Go |
زیاد
|
اصلاح گزارش شده |
|
| SiYuan's renderSprig has a missing admin check that allows any user to read full workspace DBCVE-2026-32704 · GHSA-4J3X-HHG2-FM2Xبازه‌ها نیاز به بررسی دارند. |
github.com/siyuan-note/siyuan/kernel |
Go |
متوسط
|
اصلاح گزارش شده |
|
| SiYuan Vulnerable to Path Traversal in /export Endpoint Allows Arbitrary File Read and Secret LeakageCVE-2026-30869 · GHSA-2H2P-MVFX-868Wبازه‌ها نیاز به بررسی دارند. |
github.com/siyuan-note/siyuan/kernel |
Go |
بحرانی
|
اصلاح گزارش شده |
|
| SiYuan: getAttributeViewSearchTarget returns database row content to anonymous readers with no publish-access check, reopening the class closed one day earlier at the adjacent routeCVE-2026-73608 · GHSA-9CQF-HHRQ-7V45بازه‌ها نیاز به بررسی دارند. |
github.com/siyuan-note/siyuan/kernel |
Go |
زیاد
|
اصلاح گزارش شده |
|
| SiYuan: Database view structure (all view names, layout types and per-field visibility) is returned to anonymous readers by /api/av/getAttributeViewFieldViewsCVE-2026-72791 · GHSA-57V5-WQX3-CGJ4بازه‌ها نیاز به بررسی دارند. |
github.com/siyuan-note/siyuan/kernel |
Go |
متوسط
|
اصلاح گزارش شده |
|
| SiYuan: 17 block metadata/content endpoints in kernel/api/block.go have zero publish-access filtering, reachable by anonymous publish-mode readersCVE-2026-74904 · GHSA-4VPG-GWQQ-W44Cبازه‌ها نیاز به بررسی دارند. |
github.com/siyuan-note/siyuan/kernel |
Go |
زیاد
|
اصلاح گزارش شده |
|
| SiYuan MCP asset.upload Reads Arbitrary Absolute File Paths (Workspace Boundary Bypass)CVE-2026-82233 · GHSA-P23F-CM6Q-2QP8بازه‌ها نیاز به بررسی دارند. |
github.com/siyuan-note/siyuan/kernel |
Go |
متوسط
|
اصلاح گزارش شده |
|
| SiYuan: getBookmarkLabels returns every bookmark label in the workspace to anonymous readers, with no publish-access filteringCVE-2026-73609 · GHSA-J4PH-9XWF-WCJ4بازه‌ها نیاز به بررسی دارند. |
github.com/siyuan-note/siyuan/kernel |
Go |
متوسط
|
اصلاح گزارش شده |
|
| SiYuan: TLS Private Keys Readable via getFile (Incomplete Blocklist)CVE-2026-85175 · GHSA-4WWP-F6GW-6QM5بازه‌ها نیاز به بررسی دارند. |
github.com/siyuan-note/siyuan/kernel |
Go |
متوسط
|
اصلاح گزارش شده |
|
| SiYuan: Outline state for any document, including documents forbidden to readers, is returned by /api/storage/getOutlineStorage with no access checkCVE-2026-73607 · GHSA-53FP-9JMV-227Gبازه‌ها نیاز به بررسی دارند. |
github.com/siyuan-note/siyuan/kernel |
Go |
متوسط
|
اصلاح گزارش شده |
|
| SiYuan Agent Tools SSRF via DNS-Rebinding TOCTOU (Bypass of CheckHostSSRF)CVE-2026-82234 · GHSA-X8GV-G2G3-65FJبازه‌ها نیاز به بررسی دارند. |
github.com/siyuan-note/siyuan/kernel |
Go |
زیاد
|
اصلاح گزارش شده |
|
| SiYuan discloses an administrator's open documents and search terms to anonymous readersCVE-2026-72788 · GHSA-HGFG-J9PG-43XWبازه‌ها نیاز به بررسی دارند. |
github.com/siyuan-note/siyuan/kernel |
Go |
متوسط
|
اصلاح گزارش شده |
|
