siyuan.

SiYuan 3.8.7 through 3.8.8 Path Traversal via GLOBALROOT Alias

• siyuan
• Path traversal

SiYuan 3.5.4 before 3.8.7 Sensitive Path Bypass via Windows Extended-Length Prefix

• siyuan
• Path traversal

SiYuan before v3.8.7 SQL Injection via History Search op and query

• siyuan
• SQL injection

SiYuan 2.10.0 before 3.8.7 Stored XSS via KaTeX \href in Math Blocks

• siyuan
• Cross-site scripting (XSS)

SiYuan before v3.8.7 Path Traversal Local File Read via MCP Asset Tool

• siyuan
• Path traversal

SiYuan 2.9.0 before 3.8.7 XSS via check-auth to Parameter

• siyuan
• Cross-site scripting (XSS)

SiYuan 3.6.0 before 3.8.7 Cleartext Transmission via Unenforced networkServeTLS Setting

• siyuan
• Weak cryptography or TLS

SiYuan v3.1.12 before v3.8.6 Denial of Service via getDynamicIcon Template

• siyuan
• Denial of service

SiYuan v3.7.0 before v3.8.6 Arbitrary File Read via Plugin ResponseFile.Path

• siyuan
• Path traversal

SiYuan before 3.8.5 Information Disclosure via /api/block/getDocInfo and getDocsInfo

• siyuan
• Information disclosure

SiYuan before 3.8.5 Information Disclosure via /api/export/preview

• siyuan
• Broken access control

SiYuan before v3.8.5 Information Disclosure via /api/notebook/getNotebookInfo

• siyuan
• Information disclosure

SiYuan before v3.8.5 Missing Authorization in Save-Path Resolver Endpoints

• siyuan
• Broken access control

SiYuan before v3.8.4 Information Disclosure via getCurrentAttrViewImages

• siyuan
• Information disclosure

SiYuan before v3.8.4 SQL Injection via Block Query Embed

• siyuan
• SQL injection

SiYuan before v3.8.4 Authentication Bypass via Missing Origin Header

• siyuan
• CWE-346

SiYuan 3.7.0 before 3.8.4 Stored XSS via Gallery Kanban

• siyuan
• Cross-site scripting (XSS)

SiYuan before v3.8.4 SQL Injection via dailyNoteSavePath

• siyuan
• SQL injection

SiYuan before v3.8.4 Stored XSS via Attribute View textarea

• siyuan
• Cross-site scripting (XSS)

SiYuan v2.1.0 before v3.8.4 Cross-Site Request Forgery via CheckAuth

• siyuan
• CWE-346

SiYuan before v3.8.4 Stored XSS via Unescaped Flashcard Content

• siyuan
• Cross-site scripting (XSS)

SiYuan before v3.8.4 Clipboard Data Disclosure via IPC

• siyuan
• Information disclosure

SiYuan before v3.8.4 Cross-Site Scripting via Kramdown IAL

• siyuan
• Cross-site scripting (XSS)

SiYuan before v3.8.4 Path Traversal via setNotebookIcon

• siyuan
• Path traversal

SiYuan before v3.8.4 Path Traversal via checkoutRepo sessionID

• siyuan
• Path traversal

SiYuan before v3.8.4 Path Traversal via exportBrowserHTML folder

• siyuan
• Path traversal

SiYuan before v3.8.4 Authentication Bypass via Plaintext Session Cookie

• siyuan
• Weak cryptography or TLS

SiYuan before v3.8.4 Missing Authorization via siyuan-send-windows

• siyuan
• Broken access control

SiYuan 3.8.0 through 3.8.3 Path Traversal via MCP File Operations

• siyuan
• Broken access control

SiYuan through 3.8.4 Stored XSS via Heading Style Attribute

• siyuan
• Cross-site scripting (XSS)

SiYuan through 3.8.4 Stored XSS via notebook names

• siyuan
• Cross-site scripting (XSS)

SiYuan through 3.8.4 Access Control Bypass via Dynamic Icon Endpoint

• siyuan
• Broken access control

SiYuan before 3.8.3 SQL Injection via unescaped tag in graph.go

• siyuan
• SQL injection

SiYuan before 3.8.4 Cross-Site Scripting via Document Title

• siyuan
• Cross-site scripting (XSS)

SiYuan before 3.8.4 Cross-Site Scripting via Bookmark Labels

• siyuan
• Cross-site scripting (XSS)

SiYuan before v3.8.2 Path Traversal via removeRiffDeck

• siyuan
• Path traversal

SiYuan before v3.8.2 Stored XSS via Asset Preview

• siyuan
• Cross-site scripting (XSS)

SiYuan before v3.8.2 Stored XSS via unescaped asset filenames

• siyuan
• Cross-site scripting (XSS)

SiYuan before v3.8.2 Stored XSS via Bazaar iconURL

• siyuan
• Cross-site scripting (XSS)

SiYuan before v3.8.2 Stored XSS via notebook template paths

• siyuan
• Cross-site scripting (XSS)

Siyuan before v3.8.2 Information Disclosure via fullTextSearchBlock

• siyuan
• Information disclosure

Siyuan before v3.8.2 Information Disclosure via Export Preview

• siyuan
• Broken access control

SiYuan before v3.8.2 Read-Only Boundary Bypass via fullTextSearchBlock

• siyuan
• CWE-693

siyuan before v3.8.2 SQL Injection via fullTextSearchBlock

• siyuan
• SQL injection

SiYuan before 3.8.2 Remote Code Execution via Clipboard

• siyuan
• Cross-site scripting (XSS)

SiYuan before v3.8.2 Information Disclosure via Attribute-View

• siyuan
• Broken access control

SiYuan before v3.8.2 Private Attribute View Key Enumeration

• siyuan
• Broken access control

SiYuan before v3.8.2 Unbounded Memory Consumption via ControlConcurrency

• siyuan
• Denial of service

SiYuan before v3.8.2 Denial of Service via Auth Throttle

• siyuan
• Denial of service

SiYuan before v3.8.2 Path Traversal via symlink in file API

• siyuan
• Path traversal

SiYuan before v3.8.2 Unbounded Session Creation via Basic Auth

• siyuan
• Denial of service

SiYuan before v3.8.2 Denial of Service via unauthenticated UI-process registration

• siyuan
• Denial of service

SiYuan before v3.8.2 Path Guard Bypass via Case Mismatch

• siyuan
• Path traversal

SiYuan before v3.8.2 Information Disclosure via undoState

• siyuan
• Broken access control

SiYuan through 3.8.1 Authorization Bypass via getFile

• siyuan
• Broken access control

SiYuan before v3.8.2 API Token Exposure via Log File

• siyuan
• Information disclosure

SiYuan before v3.8.2 Stored XSS via incomplete asset blocklist

• siyuan
• Cross-site scripting (XSS)

SiYuan before v3.8.1 Stored XSS via block name

• siyuan
• Cross-site scripting (XSS)

SiYuan before v3.8.1 Stored XSS via confirmDialog

• siyuan
• Cross-site scripting (XSS)

SiYuan before v3.8.1 Information Disclosure via Publish Access

• siyuan
• Information disclosure