EUVD-2026-39124
GHSA-gcm7-57gf-953c
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
AV:A reflects the network-adjacent attacker characterization in the description; AC:H reflects the valid block ID prerequisite; PR:N confirmed by explicit auth exemption in router.
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
Lifecycle Timeline
2DescriptionCVE.org
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the /api/icon/getDynamicIcon endpoint is explicitly excluded from authentication in SiYuan's kernel router (router.go, "不需要鉴权" -- no auth needed). When called with type=8 and a valid block id parameter, this endpoint invokes RenderDynamicIconContentTemplate, which executes a Go template that includes the querySQL and queryBlocks functions. These functions run arbitrary SELECT statements against the SiYuan SQLite database. An unauthenticated network-adjacent attacker who knows a valid block ID can exfiltrate all user note content, tags, asset references, and block attributes from the database. This vulnerability is fixed in 3.7.0.
AnalysisAI
SiYuan's personal knowledge management system prior to 3.7.0 exposes all user note content to unauthenticated database exfiltration through a deliberately auth-excluded API endpoint. The /api/icon/getDynamicIcon endpoint, when invoked with type=8 and a valid block ID, renders a Go template that executes arbitrary SELECT queries against SiYuan's SQLite backend via querySQL and queryBlocks functions - functions designed for note querying but reachable without any credential check. An attacker with network adjacency who possesses a valid block ID can read the entire database: note content, tags, asset references, and block attributes. No public exploit or CISA KEV listing has been identified at time of analysis; the AC:H rating reflects the block ID prerequisite. A fix is available in version 3.7.0.
Technical ContextAI
SiYuan (CPE: cpe:2.3:a:siyuan-note:siyuan:*:*:*:*:*:*:*:*) is a Go-based personal knowledge management application that stores all user data in a local SQLite database. Its kernel router (router.go) explicitly tags the /api/icon/getDynamicIcon endpoint with a 'no auth needed' exemption. When the type=8 parameter is supplied, the endpoint calls RenderDynamicIconContentTemplate, which processes a Go text/template that has access to querySQL and queryBlocks - internal SiYuan functions capable of running arbitrary SQL SELECT statements against the user's data store. The root cause maps to CWE-306 (Missing Authentication for Critical Function): a powerful query-capable code path was made accessible without any authentication gate, whether by design oversight or an incorrect assumption that the endpoint would only be called by the local interface.
RemediationAI
The primary fix is to upgrade SiYuan to version 3.7.0 or later, which resolves the missing authentication guard on the /api/icon/getDynamicIcon endpoint. The vendor advisory is available at https://github.com/siyuan-note/siyuan/security/advisories/GHSA-gcm7-57gf-953c. For deployments that cannot immediately upgrade, the most effective compensating control is to restrict network access to SiYuan's API port so the application is only reachable from localhost (127.0.0.1) - this eliminates the network-adjacent attack surface entirely. If the application must be remotely accessible, placing it behind an authenticated reverse proxy (e.g., nginx with HTTP basic auth or mTLS) at the network boundary will enforce a credential check that the application itself omits. Note that firewall-only controls do not address the missing authentication at the application layer and would not protect against an attacker already on the same local network segment.
SQL injection in SiYuan personal knowledge management (versions <= v3.7.2) lets attackers pass arbitrary SQL statements
A SQL injection vulnerability was discovered in Siyuan 3.1.11 in /getHistoryItems. Rated critical severity (CVSS 9.8), t
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the ids array parameter in /batchGetBlockAttrs. R
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent. Rated criti
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory. Rated c
SiYuan personal knowledge management system prior to 3.5.4 has a stored XSS vulnerability (CVSS 9.6) that allows code ex
Origin-validation bypass in SiYuan Note (open-source personal knowledge management) before 3.7.0 lets any installed Chro
Reflected XSS in SiYuan knowledge management before 3.5.9.
SiYuan knowledge management system prior to 3.5.5 has a path traversal in /api/file/copyFile allowing arbitrary file ope
SiYuan version 3.0.3 allows executing arbitrary commands on the server. Rated critical severity (CVSS 9.0), this vulnera
SQL injection in SiYuan prior to version 3.6.0 allows any authenticated user, including those with read-only access, to
Cross-site scripting (XSS) in SiYuan personal knowledge management system versions 3.6.0-3.6.1 allows remote attackers t
Same technique Authentication Bypass
View allVendor StatusVendor
SUSE
Severity: Moderate| Product | Status |
|---|---|
| SUSE Linux Enterprise Server 16.1 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP5 | Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP6 | Affected |
| openSUSE Leap 15.5 | Affected |
| openSUSE Leap 15.6 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today