SiYuan before v3.7.3 Path Traversal via unvalidated avID

SiYuan: Authenticated path traversal in /snippets/ static handler (serveSnippets) leaks conf/conf.json secrets and siyuan.db

SiYuan v2.1.0 before v3.8.4 Cross-Site Request Forgery via CheckAuth

SiYuan before v3.8.4 Path Traversal via setNotebookIcon

SiYuan before v3.8.4 Path Traversal via checkoutRepo sessionID

SiYuan before v3.8.4 Path Traversal via exportBrowserHTML folder

SiYuan before 3.8.3 SQL Injection via unescaped tag in graph.go

SiYuan before 3.8.5 Information Disclosure via /api/export/preview

SiYuan before v3.8.4 SQL Injection via dailyNoteSavePath

siyuan before v3.8.2 SQL Injection via fullTextSearchBlock

SiYuan before v3.8.2 Unbounded Memory Consumption via ControlConcurrency

SiYuan before v3.8.2 Denial of Service via Auth Throttle

SiYuan before v3.8.2 Denial of Service via unauthenticated UI-process registration

SiYuan before v3.7.4 Incorrect Authorization via Publish Access

SiYuan before v3.7.4 Missing Authorization via block API

SiYuan before 3.7.4 Brute-Force Authentication via Publish Service

SiYuan before v3.7.4 Authentication Bypass via WebSocket

SiYuan before 3.7.4 Brute-Force via authFilePublishAccess

SiYuan before v3.7.4 Information Disclosure via Encryption Key Material

SiYuan: SQL Query in Block Search Exposes Hidden Published Document Content

SiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read)

SiYuan: Broken access control in /api/bookmark/getBookmark allows unauthenticated publish visitors to read password-protected bookmarked content

SiYuan has directory traversal within its publishing service

SiYuan has Arbitrary Document Reading within the Publishing Service

SiYuan has an Unauthenticated Arbitrary File Read via Path Traversal

SiYuan has an Unauthenticated WebSocket DoS via Auth Keepalive Bypass

SiYuan: Cross-Origin WebSocket Hijacking via Authentication Bypass — Unauthenticated Information Disclosure

SiYuan has a File Read Interface Case Bypass Vulnerability

SiYuan vulnerable to arbitrary file read

SiYuan before v3.8.2 Stored XSS via Asset Preview

SiYuan before v3.8.2 Stored XSS via unescaped asset filenames

SiYuan before v3.8.2 Stored XSS via notebook template paths

SiYuan: SiYuan publish-mode Reader can mutate Conf and SQL index via 8 ungated APIs

SiYuan has Arbitrary File Write via /api/file/copyFile leading to RCE

SiYuan before v3.8.4 SQL Injection via Block Query Embed

SiYuan before v3.7.4 SSRF via IPv6 Transition Address Bypass

SiYuan: Stored XSS in Bazaar marketplace via package README event handlers

SiYuan: Incomplete Fix Bypass for CVE-2026-30869: Path Traversal via Double URL Encoding in `/export/` Endpoint

SiYuan Note publish service authorization bypass allows low-privilege users to modify notebook content

SiYuan before 3.8.1 Local Privilege Escalation via Uncontrolled Search Path