SiYuan before v3.8.4 SQL Injection via dailyNoteSavePath

siyuan before v3.8.2 SQL Injection via fullTextSearchBlock

SiYuan before v3.8.2 Unbounded Memory Consumption via ControlConcurrency

SiYuan before v3.8.2 Denial of Service via Auth Throttle

SiYuan before v3.8.2 Denial of Service via unauthenticated UI-process registration

SiYuan before v3.7.4 Incorrect Authorization via Publish Access

SiYuan before v3.7.4 Missing Authorization via block API

SiYuan before 3.7.4 Brute-Force Authentication via Publish Service

SiYuan before v3.7.4 Authentication Bypass via WebSocket

SiYuan before 3.7.4 Brute-Force via authFilePublishAccess

SiYuan before v3.7.4 Information Disclosure via Encryption Key Material

SiYuan: SQL Query in Block Search Exposes Hidden Published Document Content

SiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read)

SiYuan: Broken access control in /api/bookmark/getBookmark allows unauthenticated publish visitors to read password-protected bookmarked content

SiYuan has directory traversal within its publishing service

SiYuan has Arbitrary Document Reading within the Publishing Service

SiYuan has an Unauthenticated Arbitrary File Read via Path Traversal

SiYuan has an Unauthenticated WebSocket DoS via Auth Keepalive Bypass

SiYuan: Cross-Origin WebSocket Hijacking via Authentication Bypass — Unauthenticated Information Disclosure

SiYuan has a File Read Interface Case Bypass Vulnerability

SiYuan vulnerable to arbitrary file read

SiYuan has an arbitrary file read and path traversal via /api/export/exportResources

SiYuan has an arbitrary file read via /api/template/render

SiYuan before v3.8.2 Stored XSS via Asset Preview

SiYuan before v3.8.2 Stored XSS via unescaped asset filenames

SiYuan before v3.8.2 Stored XSS via notebook template paths

SiYuan: SiYuan publish-mode Reader can mutate Conf and SQL index via 8 ungated APIs

SiYuan has Arbitrary File Write via /api/file/copyFile leading to RCE

SiYuan before v3.8.4 SQL Injection via Block Query Embed

SiYuan before v3.7.4 SSRF via IPv6 Transition Address Bypass

SiYuan: Stored XSS in Bazaar marketplace via package README event handlers

SiYuan: Incomplete Fix Bypass for CVE-2026-30869: Path Traversal via Double URL Encoding in `/export/` Endpoint

SiYuan Note publish service authorization bypass allows low-privilege users to modify notebook content

SiYuan before 3.8.1 Local Privilege Escalation via Uncontrolled Search Path

SiYuan 2.9.0 before 3.8.7 XSS via check-auth to Parameter

SiYuan 3.6.0 before 3.8.7 Cleartext Transmission via Unenforced networkServeTLS Setting

SiYuan before v3.8.2 Stored XSS via Bazaar iconURL

SiYuan has an Incomplete Fix for IsSensitivePath Denylist Allows File Read from /opt, /usr, /home

SiYuan importStdMd: unvalidated localPath imports arbitrary host directories as persistent notes

SiYuan before v3.7.4 Plugin Overwrite via Bazaar Install

SiYuan v3.1.12 before v3.8.6 Denial of Service via getDynamicIcon Template

SiYuan v3.7.0 before v3.8.6 Arbitrary File Read via Plugin ResponseFile.Path

SiYuan 3.8.0 through 3.8.3 Path Traversal via MCP File Operations

Siyuan before v3.8.2 Information Disclosure via Export Preview

SiYuan before v3.8.2 Information Disclosure via Attribute-View

SiYuan before v3.8.2 Path Traversal via symlink in file API

SiYuan before v3.8.2 Unbounded Session Creation via Basic Auth

SiYuan before v3.8.2 Path Guard Bypass via Case Mismatch

SiYuan through 3.8.1 Authorization Bypass via getFile

SiYuan before v3.7.4 Missing Authorization via refreshBacklink