Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 20 total.
Missing authorization in SiYuan getAttributeViewSearchTarget endpoint (CVE-2026-73608)
The `/api/av/getAttributeViewSearchTarget` endpoint in SiYuan's development branch is registered with `CheckAuth` only and performs no authorization checks of any kind - no `CheckReadonly`, no publish-access gate, and...
Fixed in v3.7.4
Missing publish-password check in SiYuan graph API endpoints (CVE-2026-72804)
The `getGraph` and `getLocalGraph` endpoints in SiYuan filter document access by visibility tier only and never evaluate the publish password. Because password-protected documents are marked Visible = true, their node...
Fixed in v3.7.4
Publish-access bypass in SiYuan embedded block endpoints (CVE-2026-72795)
The `/api/block/getBlockDOMWithEmbed` and `/api/block/getBlockDOMsWithEmbed` endpoints in SiYuan apply publish-access checks only to the directly requested block, not to any blocks inlined by that block's embed (trans...
Fixed in v3.7.4
Session cookie signing key disclosure in siyuan via getConf endpoint (CVE-2026-72794)
The POST /api/system/getConf endpoint in siyuan returns the server's session cookie signing key (Conf.CookieKey) in its response body to unauthenticated users when publish mode is enabled with authentication disabled,...
Fixed in v3.7.4
Information disclosure in SiYuan publish-mode attribute view filter (CVE-2026-72798)
Two defects in SiYuan's `renderAttributeView` publish-access filter allow anonymous readers to retrieve restricted content in publish mode. First, Relation and Rollup cells carry mirrored content from related database...
Fixed in v3.7.4
Sensitive configuration disclosure in SiYuan via /api/system/getConf (CVE-2026-72793)
The `/api/system/getConf` endpoint in SiYuan is reachable by anonymous users and publish-reader tokens, and its non-administrator masking chain fails to suppress three fields that the configuration-export path explici...
Fixed in v3.7.4
Authorization bypass in SiYuan encrypted notebook publish access gate (CVE-2026-72789)
SiYuan's publish-access gate uses an opt-out list (`publishAccess.json`) that is never populated with encrypted notebooks, causing the gate to treat all encrypted notebooks as publicly accessible by default. While an ...
Fixed in v3.7.4
Authentication bypass in SiYuan publish-mode password-protected documents (CVE-2026-68584)
SiYuan's publish mode enforces a password check on the primary `getDoc` endpoint via `FilterContentByPublishAccess`, but the endpoints `getHeadingChildrenDOM`, `getHeadingDeleteTransaction`, `getHeadingLevelTransactio...
Fixed in v3.7.3
Publish-access bypass in SiYuan backlink content endpoints (CVE-2026-68586)
SiYuan's backlink API exposes two content endpoints, /api/ref/getBacklinkDoc and /api/ref/getBackmentionDoc, that return the rendered DOM of referencing blocks without applying the publish-access filter enforced by th...
Fixed in v3.7.3
Information disclosure in SiYuan via getHeading*Transaction endpoints (CVE-2026-68587)
Three heading transaction endpoints in SiYuan's publish mode (`/api/block/getHeadingDeleteTransaction`, `/api/block/getHeadingLevelTransaction`, and `/api/block/getHeadingInsertTransaction`) return rendered block DOM ...
Fixed in v3.7.3
Arbitrary SQL execution in SiYuan via searchEmbedBlock endpoint (CVE-2026-69084)
The `/api/search/searchEmbedBlock` endpoint in SiYuan passes a client-supplied SQL statement verbatim to the main read-write `siyuan.db` handle with no validation, single-statement guard, read-only restriction, or adm...
Fixed in v3.7.3
SQL injection in SiYuan fullTextSearchAssetContent endpoint (CVE-2026-69083)
The `/api/search/fullTextSearchAssetContent` endpoint in SiYuan exposes two SQL injection flaws on the asset-content database. Method 2 passes a client-supplied SQL statement directly to a read-write database handle w...
Fixed in v3.7.3
SQL injection in SiYuan searchDocs endpoint via unescaped keyword (CVE-2026-69085)
The `/api/filetree/searchDocs` endpoint in SiYuan concatenates the caller-supplied `keyword` parameter directly into SQL statements with no escaping or parameter binding. The endpoint is reachable by a publish `RoleRe...
Fixed in v3.7.3
Stored XSS to OS RCE via unescaped style attribute in SiYuan (CVE-2026-66396)
SiYuan fails to escape the `title-img` Individual Attribute List value before interpolating it into the `style` attribute of cover images rendered in the Attribute-View Gallery and Kanban features. An attacker with ed...
Fixed in v3.7.2
Reflected XSS to OS RCE in SiYuan desktop via siyuan:// deep link (CVE-2026-66395)
The SiYuan desktop app registers `siyuan://` as an OS-level protocol handler and reflects an attacker-controlled path segment from `siyuan://bazaar/plugins/<payload>/readme` URLs verbatim into a `showMessage` call tha...
Fixed in v3.7.2
Stored and reflected XSS in SiYuan via SVG sanitizer bypass (CVE-2026-66394)
SiYuan's SVG sanitizer parses attacker-supplied SVG input using an HTML parser while the browser receives the output as image/svg+xml (XML). Because HTML and XML parsers treat elements such as desc, style, and noscrip...
Fixed in v3.7.3
Missing authorization on MCP endpoint in SiYuan (CVE-2026-66012)
The POST /mcp endpoint in the SiYuan kernel exposes 31 MCP tools - including file list, read, write, delete, rename, and copy operations across the entire workspace - gated only by a general authentication check (mode...
Fixed in v3.7.2
Stored XSS to RCE via incomplete HTML escaping in SiYuan Attribute View (CVE-2026-65605)
SiYuan's Attribute View (database) template column renders cell values as HTML using text/template without auto-escaping, applying EscapeHTML only when HasUnclosedHtmlTag returns true. Because that check treats self-c...
Fixed in v3.7.2
XSS to remote code execution in SiYuan Desktop via protocol handler (CVE-2026-65606)
SiYuan Desktop fails to escape the `icon` parameter from `siyuan://plugins/<name>` links before inserting it into the tab header via `innerHTML` in `app/src/layout/Tab.ts`. An attacker can inject an `<img onerror=...>...
Fixed in v3.7.2
Path traversal in SiYuan /export/temp/ short-circuit branch (CVE-2026-65607)
SiYuan's serveExport handler contains a short-circuit branch for /export/temp/ requests that joins the raw percent-decoded request path with util.TempDir and serves files without the IsSubPath or IsSensitivePath check...
Fixed in v3.7.2