github.com/siyuan-note/siyuan/kernel

Vulnerabilities (53)

• CVE-2026-72812MedAug 14, 2026
  affected < 0.0.0-20260723002528-7d273c271ce1fixed 0.0.0-20260723002528-7d273c271ce1

  SiYuan versions before v3.7.4 contain a missing authorization vulnerability in the /api/ref/refreshBacklink endpoint that allows anonymous readers to trigger persistent server-side writes. Attackers can invoke the endpoint with an attacker-controlled block ID to flush transaction

• CVE-2026-72811CriAug 14, 2026
  affected < 0.0.0-20260723004839-1a5b3431d5abfixed 0.0.0-20260723004839-1a5b3431d5ab

  SiYuan versions <= v3.7.2 contain a SQL injection vulnerability in the backlink/mention search query (kernel/model/backlink.go), which concatenates stored block metadata (title, name, alias, anchor text) and the client-supplied keyword into a SQL MATCH/search statement while esca

• CVE-2026-72810HigAug 14, 2026
  affected < 0.0.0-20260723013612-ba948639d7f6fixed 0.0.0-20260723013612-ba948639d7f6

  SiYuan versions before v3.7.4 contain a publish-boundary bypass vulnerability in WebSocket broadcast sessions that allows anonymous readers to receive unfiltered edits. Attackers can establish a WebSocket connection to the publish surface and passively receive real-time content e

• CVE-2026-72809HigAug 12, 2026
  affected < 0.0.0-20260723031701-9c16e9851f0bfixed 0.0.0-20260723031701-9c16e9851f0b

  SiYuan versions <= v3.7.2 (patched in v3.7.4) contain an authentication bypass vulnerability in the kernel's CheckAuth function, which grants the administrator role (RoleAdministrator) to any request whose RemoteAddr is loopback (127.0.0.1) for a specific set of endpoints (includ

• CVE-2026-72808MedAug 12, 2026
  affected < 0.0.0-20260723031702-509b35055940fixed 0.0.0-20260723031702-509b35055940

  SiYuan versions up to and including v3.7.2 (fixed in v3.7.4) contain an information disclosure vulnerability in the /api/asset/getFileAnnotation endpoint, which returns .sya PDF-annotation file content without a publish-access check. Because the endpoint is gated only by CheckAut

• CVE-2026-72807HigAug 12, 2026
  affected < 0.0.0-20260723035036-0a176345e02afixed 0.0.0-20260723035036-0a176345e02a

  SiYuan versions before v3.7.4 contain a second-order SQL injection vulnerability in attribute-view template columns that expose the queryBlocks function, which executes raw SQL using string substitution instead of parameterized queries. Attackers can distribute malicious SiYuan d

• CVE-2026-72806MedAug 12, 2026
  affected < 0.0.0-20260723040913-768427f20f13fixed 0.0.0-20260723040913-768427f20f13

  SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the FilterViewByPublishAccess filter that fails to check publish password protection when rendering attribute views and database rows. Unauthenticated readers can access password-protected document ro

• CVE-2026-72805MedAug 12, 2026
  affected < 0.0.0-20260723163028-931ba693375efixed 0.0.0-20260723163028-931ba693375e

  SiYuan versions before v3.7.4 fail to enforce publish-access checks on getBlockBreadcrumb, getRefText, and getBlockTreeInfos endpoints, allowing disclosure of protected document content and metadata. Anonymous readers or publish RoleReader accounts can retrieve document titles, a

• CVE-2026-72804HigAug 12, 2026
  affected < 0.0.0-20260724091654-82e9ded423e4fixed 0.0.0-20260724091654-82e9ded423e4

  SiYuan versions before v3.7.4 fail to validate publish-password tier in getGraph and getLocalGraph endpoints, allowing anonymous readers to retrieve block-level content of password-protected documents. Attackers can call these endpoints without supplying a password to read protec

• CVE-2026-41894HigApr 24, 2026
  affected < 3.6.5fixed 3.6.5

  SiYuan is an open-source personal knowledge management system. Prior to 3.6.5, the fix for CVE-2026-30869 only added a denylist check (IsSensitivePath) but did not address the root cause — a redundant url.PathUnescape() call in serveExport(). An authenticated attacker can use dou

• CVE-2026-40922MedApr 17, 2026
  affected < 0.0.0-20260414013942-62eed37a3263fixed 0.0.0-20260414013942-62eed37a3263

  SiYuan is an open-source personal knowledge management system. In versions 3.6.1 through 3.6.3, a prior fix for XSS in bazaar README rendering (incomplete fix for CVE-2026-33066) enabled the Lute HTML sanitizer, but the sanitizer does not block iframe tags, and its URL-prefix blo

• CVE-2026-40318HigApr 16, 2026
  affected < 3.6.40.0.0-20260407035653-2f416e5253f1fixed 3.6.40.0.0-20260407035653-2f416e5253f1

  SiYuan is an open-source personal knowledge management system. In versions 3.6.3 and prior, the /api/av/removeUnusedAttributeView endpoint constructs a filesystem path using the user-controlled id parameter without validation or path boundary enforcement. An attacker can inject p

• CVE-2026-40259HigApr 16, 2026
  affected < 0.0.0-20260407035653-2f416e5253f1fixed 0.0.0-20260407035653-2f416e5253f1

  SiYuan is an open-source personal knowledge management system. In versions 3.6.3 and below, the /api/av/removeUnusedAttributeView endpoint is protected only by generic authentication that accepts publish-service RoleReader tokens. The handler passes a caller-controlled id directl

• CVE-2026-40107MedApr 9, 2026
  affected < 0.0.0-20260407035653-2f416e5253f1fixed 0.0.0-20260407035653-2f416e5253f1

  SiYuan is a personal knowledge management system. Prior to 3.6.4, SiYuan configures Mermaid.js with securityLevel: "loose" and htmlLabels: true. In this mode, tags with src attributes survive Mermaid's internal DOMPurify and land in SVG blocks. The SVG is in

• CVE-2026-39846CriApr 7, 2026
  affected < 0.0.0-20260407035653-2f416e5253f1fixed 0.0.0-20260407035653-2f416e5253f1

  SiYuan is a personal knowledge management system. Prior to 3.6.4, a malicious note synced to another user can trigger remote code execution in the SiYuan Electron desktop client. The root cause is that table caption content is stored without safe escaping and later unescaped into

• CVE-2026-34605MedMar 31, 2026
  affected < 0.0.0-20260330031106-f09953afc57afixed 0.0.0-20260330031106-f09953afc57a

  SiYuan is a personal knowledge management system. From version 3.6.0 to before version 3.6.2, the SanitizeSVG function introduced in version 3.6.0 to fix XSS in the unauthenticated /api/icon/getDynamicIcon endpoint can be bypassed by using namespace-prefixed element names such as

• CVE-2026-34585HigMar 31, 2026
  affected < 0.0.0-20260329142331-918d1bd9f967fixed 0.0.0-20260329142331-918d1bd9f967

  SiYuan is a personal knowledge management system. Prior to version 3.6.2, a vulnerability allows crafted block attribute values to bypass server-side attribute escaping when an HTML entity is mixed with raw special characters. An attacker can embed a malicious IAL value inside a

• CVE-2026-34453HigMar 31, 2026
  affected < 3.6.2fixed 3.6.2

  SiYuan is a personal knowledge management system. Prior to version 3.6.2, the publish service exposes bookmarked blocks from password-protected documents to unauthenticated visitors. In publish/read-only mode, /api/bookmark/getBookmark filters bookmark results by calling FilterBl

• CVE-2026-34449CriMar 31, 2026
  affected < 3.6.2fixed 3.6.2

  SiYuan is a personal knowledge management system. Prior to version 3.6.2, a malicious website can achieve Remote Code Execution (RCE) on any desktop running SiYuan by exploiting the permissive CORS policy (Access-Control-Allow-Origin: * + Access-Control-Allow-Private-Network: tru

• CVE-2026-34448CriMar 31, 2026
  affected < 3.6.2fixed 3.6.2

  SiYuan is a personal knowledge management system. Prior to version 3.6.2, an attacker who can place a malicious URL in an Attribute View mAsse field can trigger stored XSS when a victim opens the Gallery or Kanban view with “Cover From -> Asset Field” enabled. The vulnerable code