# siyuan. Every CVE that names siyuan among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [SiYuan 3.8.7 through 3.8.8 Path Traversal via GLOBALROOT Alias](https://agentprime.io/advisories/CVE-2026-118680.md) `CVE-2026-118680` · CVE record: siyuan-note siyuan · CVSS 5.9 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal - [SiYuan 3.5.4 before 3.8.7 Sensitive Path Bypass via Windows Extended-Length Prefix](https://agentprime.io/advisories/CVE-2026-116171.md) `CVE-2026-116171` · CVE record: siyuan-note siyuan · CVSS 5.9 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: Path traversal - [SiYuan before v3.8.7 SQL Injection via History Search op and query](https://agentprime.io/advisories/CVE-2026-116170.md) `CVE-2026-116170` · CVE record: siyuan-note siyuan · CVSS 6.9 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: SQL injection - [SiYuan 2.10.0 before 3.8.7 Stored XSS via KaTeX \href in Math Blocks](https://agentprime.io/advisories/CVE-2026-116169.md) `CVE-2026-116169` · CVE record: siyuan-note siyuan · CVSS 5.1 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: Cross-site scripting (XSS) - [SiYuan before v3.8.7 Path Traversal Local File Read via MCP Asset Tool](https://agentprime.io/advisories/CVE-2026-116168.md) `CVE-2026-116168` · CVE record: siyuan-note siyuan · CVSS 6.9 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: Path traversal - [SiYuan 2.9.0 before 3.8.7 XSS via check-auth to Parameter](https://agentprime.io/advisories/CVE-2026-116167.md) `CVE-2026-116167` · CVE record: siyuan-note siyuan · CVSS 7.6 High · Not analysed yet · Published 25 Oct 2026 · Tags: Cross-site scripting (XSS) - [SiYuan 3.6.0 before 3.8.7 Cleartext Transmission via Unenforced networkServeTLS Setting](https://agentprime.io/advisories/CVE-2026-116166.md) `CVE-2026-116166` · CVE record: siyuan-note siyuan · CVSS 7.6 High · Not analysed yet · Published 25 Oct 2026 · Tags: Weak cryptography or TLS - [SiYuan v3.1.12 before v3.8.6 Denial of Service via getDynamicIcon Template](https://agentprime.io/advisories/CVE-2026-109310.md) `CVE-2026-109310` · CVE record: siyuan-note siyuan · CVSS 7.1 High · Not analysed yet · Published 12 Oct 2026 · Tags: Denial of service - [SiYuan v3.7.0 before v3.8.6 Arbitrary File Read via Plugin ResponseFile.Path](https://agentprime.io/advisories/CVE-2026-109309.md) `CVE-2026-109309` · CVE record: siyuan-note siyuan · CVSS 6.9 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal - [SiYuan before 3.8.5 Information Disclosure via /api/block/getDocInfo and getDocsInfo](https://agentprime.io/advisories/CVE-2026-105205.md) `CVE-2026-105205` · CVE record: siyuan-note siyuan · CVSS 6.9 Medium · Not analysed yet · Published 4 Oct 2026 · Tags: Information disclosure - [SiYuan before 3.8.5 Information Disclosure via /api/export/preview](https://agentprime.io/advisories/CVE-2026-104410.md) `CVE-2026-104410` · CVE record: siyuan-note siyuan · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Broken access control - [SiYuan before v3.8.5 Information Disclosure via /api/notebook/getNotebookInfo](https://agentprime.io/advisories/CVE-2026-103763.md) `CVE-2026-103763` · CVE record: siyuan-note siyuan · CVSS 6.9 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Information disclosure - [SiYuan before v3.8.5 Missing Authorization in Save-Path Resolver Endpoints](https://agentprime.io/advisories/CVE-2026-103762.md) `CVE-2026-103762` · CVE record: siyuan-note siyuan · CVSS 6.9 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Broken access control - [SiYuan before v3.8.4 Information Disclosure via getCurrentAttrViewImages](https://agentprime.io/advisories/CVE-2026-101092.md) `CVE-2026-101092` · CVE record: siyuan-note siyuan · CVSS 6.9 Medium · Not analysed yet · Published 28 Sept 2026 · Tags: Information disclosure - [SiYuan before v3.8.4 SQL Injection via Block Query Embed](https://agentprime.io/advisories/CVE-2026-101091.md) `CVE-2026-101091` · CVE record: siyuan-note siyuan · CVSS 7.1 High · Not analysed yet · Published 28 Sept 2026 · Tags: SQL injection - [SiYuan before v3.8.4 Authentication Bypass via Missing Origin Header](https://agentprime.io/advisories/CVE-2026-100646.md) `CVE-2026-100646` · CVE record: siyuan-note siyuan · CVSS 8.6 High · Not analysed yet · Published 26 Sept 2026 · Tags: CWE-346 - [SiYuan 3.7.0 before 3.8.4 Stored XSS via Gallery Kanban](https://agentprime.io/advisories/CVE-2026-100645.md) `CVE-2026-100645` · CVE record: siyuan-note siyuan · CVSS 8.6 High · Not analysed yet · Published 26 Sept 2026 · Tags: Cross-site scripting (XSS) - [SiYuan before v3.8.4 SQL Injection via dailyNoteSavePath](https://agentprime.io/advisories/CVE-2026-100644.md) `CVE-2026-100644` · CVE record: siyuan-note siyuan · CVSS 8.7 High · Not analysed yet · Published 26 Sept 2026 · Tags: SQL injection - [SiYuan before v3.8.4 Stored XSS via Attribute View textarea](https://agentprime.io/advisories/CVE-2026-100643.md) `CVE-2026-100643` · CVE record: siyuan-note siyuan · CVSS 8.5 High · Not analysed yet · Published 26 Sept 2026 · Tags: Cross-site scripting (XSS) - [SiYuan v2.1.0 before v3.8.4 Cross-Site Request Forgery via CheckAuth](https://agentprime.io/advisories/CVE-2026-100642.md) `CVE-2026-100642` · CVE record: siyuan-note siyuan · CVSS 7.2 High · Not analysed yet · Published 26 Sept 2026 · Tags: CWE-346 - [SiYuan before v3.8.4 Stored XSS via Unescaped Flashcard Content](https://agentprime.io/advisories/CVE-2026-100641.md) `CVE-2026-100641` · CVE record: siyuan-note siyuan · CVSS 8.6 High · Not analysed yet · Published 26 Sept 2026 · Tags: Cross-site scripting (XSS) - [SiYuan before v3.8.4 Clipboard Data Disclosure via IPC](https://agentprime.io/advisories/CVE-2026-100640.md) `CVE-2026-100640` · CVE record: siyuan-note siyuan · CVSS 8.6 High · Not analysed yet · Published 26 Sept 2026 · Tags: Information disclosure - [SiYuan before v3.8.4 Cross-Site Scripting via Kramdown IAL](https://agentprime.io/advisories/CVE-2026-100639.md) `CVE-2026-100639` · CVE record: siyuan-note siyuan · CVSS 8.6 High · Not analysed yet · Published 26 Sept 2026 · Tags: Cross-site scripting (XSS) - [SiYuan before v3.8.4 Path Traversal via setNotebookIcon](https://agentprime.io/advisories/CVE-2026-100638.md) `CVE-2026-100638` · CVE record: siyuan-note siyuan · CVSS 8.3 High · Not analysed yet · Published 26 Sept 2026 · Tags: Path traversal - [SiYuan before v3.8.4 Path Traversal via checkoutRepo sessionID](https://agentprime.io/advisories/CVE-2026-100637.md) `CVE-2026-100637` · CVE record: siyuan-note siyuan · CVSS 8.3 High · Not analysed yet · Published 26 Sept 2026 · Tags: Path traversal - [SiYuan before v3.8.4 Path Traversal via exportBrowserHTML folder](https://agentprime.io/advisories/CVE-2026-100636.md) `CVE-2026-100636` · CVE record: siyuan-note siyuan · CVSS 8.3 High · Not analysed yet · Published 26 Sept 2026 · Tags: Path traversal - [SiYuan before v3.8.4 Authentication Bypass via Plaintext Session Cookie](https://agentprime.io/advisories/CVE-2026-100635.md) `CVE-2026-100635` · CVE record: siyuan-note siyuan · CVSS 8.2 High · Not analysed yet · Published 26 Sept 2026 · Tags: Weak cryptography or TLS - [SiYuan before v3.8.4 Missing Authorization via siyuan-send-windows](https://agentprime.io/advisories/CVE-2026-100634.md) `CVE-2026-100634` · CVE record: siyuan-note siyuan · CVSS 5.3 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control - [SiYuan 3.8.0 through 3.8.3 Path Traversal via MCP File Operations](https://agentprime.io/advisories/CVE-2026-100633.md) `CVE-2026-100633` · CVE record: siyuan-note siyuan · CVSS 8.5 High · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control - [SiYuan through 3.8.4 Stored XSS via Heading Style Attribute](https://agentprime.io/advisories/CVE-2026-93923.md) `CVE-2026-93923` · CVE record: siyuan-note siyuan · CVSS 8.6 High · Not analysed yet · Published 18 Sept 2026 · Tags: Cross-site scripting (XSS) - [SiYuan through 3.8.4 Stored XSS via notebook names](https://agentprime.io/advisories/CVE-2026-93922.md) `CVE-2026-93922` · CVE record: siyuan-note siyuan · CVSS 8.6 High · Not analysed yet · Published 18 Sept 2026 · Tags: Cross-site scripting (XSS) - [SiYuan through 3.8.4 Access Control Bypass via Dynamic Icon Endpoint](https://agentprime.io/advisories/CVE-2026-93921.md) `CVE-2026-93921` · CVE record: siyuan-note siyuan · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Broken access control - [SiYuan before 3.8.3 SQL Injection via unescaped tag in graph.go](https://agentprime.io/advisories/CVE-2026-93591.md) `CVE-2026-93591` · CVE record: siyuan-note siyuan · CVSS 7.2 High · Not analysed yet · Published 18 Sept 2026 · Tags: SQL injection - [SiYuan before 3.8.4 Cross-Site Scripting via Document Title](https://agentprime.io/advisories/CVE-2026-92986.md) `CVE-2026-92986` · CVE record: siyuan-note siyuan · CVSS 8.6 High · Not analysed yet · Published 17 Sept 2026 · Tags: Cross-site scripting (XSS) - [SiYuan before 3.8.4 Cross-Site Scripting via Bookmark Labels](https://agentprime.io/advisories/CVE-2026-92985.md) `CVE-2026-92985` · CVE record: siyuan-note siyuan · CVSS 8.6 High · Not analysed yet · Published 17 Sept 2026 · Tags: Cross-site scripting (XSS) - [SiYuan before v3.8.2 Path Traversal via removeRiffDeck](https://agentprime.io/advisories/CVE-2026-87815.md) `CVE-2026-87815` · CVE record: siyuan-note siyuan · CVSS 8.4 High · Not analysed yet · Published 9 Sept 2026 · Tags: Path traversal - [SiYuan before v3.8.2 Stored XSS via Asset Preview](https://agentprime.io/advisories/CVE-2026-87814.md) `CVE-2026-87814` · CVE record: siyuan-note siyuan · CVSS 8.4 High · Not analysed yet · Published 9 Sept 2026 · Tags: Cross-site scripting (XSS) - [SiYuan before v3.8.2 Stored XSS via unescaped asset filenames](https://agentprime.io/advisories/CVE-2026-87813.md) `CVE-2026-87813` · CVE record: siyuan-note siyuan · CVSS 8.4 High · Not analysed yet · Published 9 Sept 2026 · Tags: Cross-site scripting (XSS) - [SiYuan before v3.8.2 Stored XSS via Bazaar iconURL](https://agentprime.io/advisories/CVE-2026-87812.md) `CVE-2026-87812` · CVE record: siyuan-note siyuan · CVSS 7.4 High · Not analysed yet · Published 9 Sept 2026 · Tags: Cross-site scripting (XSS) - [SiYuan before v3.8.2 Stored XSS via notebook template paths](https://agentprime.io/advisories/CVE-2026-87811.md) `CVE-2026-87811` · CVE record: siyuan-note siyuan · CVSS 8.4 High · Not analysed yet · Published 9 Sept 2026 · Tags: Cross-site scripting (XSS) - [Siyuan before v3.8.2 Information Disclosure via fullTextSearchBlock](https://agentprime.io/advisories/CVE-2026-87810.md) `CVE-2026-87810` · CVE record: siyuan-note siyuan · CVSS 6.9 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure - [Siyuan before v3.8.2 Information Disclosure via Export Preview](https://agentprime.io/advisories/CVE-2026-87809.md) `CVE-2026-87809` · CVE record: siyuan-note siyuan · CVSS 7.1 High · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control - [SiYuan before v3.8.2 Read-Only Boundary Bypass via fullTextSearchBlock](https://agentprime.io/advisories/CVE-2026-87808.md) `CVE-2026-87808` · CVE record: siyuan-note siyuan · CVSS 8.7 High · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-693 - [siyuan before v3.8.2 SQL Injection via fullTextSearchBlock](https://agentprime.io/advisories/CVE-2026-87807.md) `CVE-2026-87807` · CVE record: siyuan-note siyuan · CVSS 8.7 High · Not analysed yet · Published 9 Sept 2026 · Tags: SQL injection - [SiYuan before 3.8.2 Remote Code Execution via Clipboard](https://agentprime.io/advisories/CVE-2026-86712.md) `CVE-2026-86712` · CVE record: siyuan-note siyuan · CVSS 8.6 High · Not analysed yet · Published 8 Sept 2026 · Tags: Cross-site scripting (XSS) - [SiYuan before v3.8.2 Information Disclosure via Attribute-View](https://agentprime.io/advisories/CVE-2026-86192.md) `CVE-2026-86192` · CVE record: siyuan-note siyuan · CVSS 7.1 High · Not analysed yet · Published 5 Sept 2026 · Tags: Broken access control - [SiYuan before v3.8.2 Private Attribute View Key Enumeration](https://agentprime.io/advisories/CVE-2026-86191.md) `CVE-2026-86191` · CVE record: siyuan-note siyuan · CVSS 5.3 Medium · Not analysed yet · Published 5 Sept 2026 · Tags: Broken access control - [SiYuan before v3.8.2 Unbounded Memory Consumption via ControlConcurrency](https://agentprime.io/advisories/CVE-2026-85585.md) `CVE-2026-85585` · CVE record: siyuan-note siyuan · CVSS 8.7 High · Not analysed yet · Published 4 Sept 2026 · Tags: Denial of service - [SiYuan before v3.8.2 Denial of Service via Auth Throttle](https://agentprime.io/advisories/CVE-2026-85584.md) `CVE-2026-85584` · CVE record: siyuan-note siyuan · CVSS 8.7 High · Not analysed yet · Published 4 Sept 2026 · Tags: Denial of service - [SiYuan before v3.8.2 Path Traversal via symlink in file API](https://agentprime.io/advisories/CVE-2026-85583.md) `CVE-2026-85583` · CVE record: siyuan-note siyuan · CVSS 7.1 High · Not analysed yet · Published 4 Sept 2026 · Tags: Path traversal - [SiYuan before v3.8.2 Unbounded Session Creation via Basic Auth](https://agentprime.io/advisories/CVE-2026-85582.md) `CVE-2026-85582` · CVE record: siyuan-note siyuan · CVSS 7.1 High · Not analysed yet · Published 4 Sept 2026 · Tags: Denial of service - [SiYuan before v3.8.2 Denial of Service via unauthenticated UI-process registration](https://agentprime.io/advisories/CVE-2026-85581.md) `CVE-2026-85581` · CVE record: siyuan-note siyuan · CVSS 8.7 High · Not analysed yet · Published 4 Sept 2026 · Tags: Denial of service - [SiYuan before v3.8.2 Path Guard Bypass via Case Mismatch](https://agentprime.io/advisories/CVE-2026-85580.md) `CVE-2026-85580` · CVE record: siyuan-note siyuan · CVSS 7.1 High · Not analysed yet · Published 4 Sept 2026 · Tags: Path traversal - [SiYuan before v3.8.2 Information Disclosure via undoState](https://agentprime.io/advisories/CVE-2026-85579.md) `CVE-2026-85579` · CVE record: siyuan-note siyuan · CVSS 5.3 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Broken access control - [SiYuan through 3.8.1 Authorization Bypass via getFile](https://agentprime.io/advisories/CVE-2026-85578.md) `CVE-2026-85578` · CVE record: siyuan-note siyuan · CVSS 7.1 High · Not analysed yet · Published 4 Sept 2026 · Tags: Broken access control - [SiYuan before v3.8.2 API Token Exposure via Log File](https://agentprime.io/advisories/CVE-2026-85174.md) `CVE-2026-85174` · CVE record: siyuan-note siyuan · CVSS 8.7 High · Not analysed yet · Published 3 Sept 2026 · Tags: Information disclosure - [SiYuan before v3.8.2 Stored XSS via incomplete asset blocklist](https://agentprime.io/advisories/CVE-2026-84803.md) `CVE-2026-84803` · CVE record: siyuan-note siyuan · CVSS 8.6 High · Not analysed yet · Published 2 Sept 2026 · Tags: Cross-site scripting (XSS) - [SiYuan before v3.8.1 Stored XSS via block name](https://agentprime.io/advisories/CVE-2026-82654.md) `CVE-2026-82654` · CVE record: siyuan-note siyuan · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Aug 2026 · Tags: Cross-site scripting (XSS) - [SiYuan before v3.8.1 Stored XSS via confirmDialog](https://agentprime.io/advisories/CVE-2026-82653.md) `CVE-2026-82653` · CVE record: siyuan-note siyuan · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Aug 2026 · Tags: Cross-site scripting (XSS) - [SiYuan before v3.8.1 Information Disclosure via Publish Access](https://agentprime.io/advisories/CVE-2026-82652.md) `CVE-2026-82652` · CVE record: siyuan-note siyuan · CVSS 6.9 Medium · Not analysed yet · Published 30 Aug 2026 · Tags: Information disclosure Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .