Login Request a demo
SI
Product
siyuan
by siyuan-note · last CVE Oct 28, 2026
219
CVEs
0
On KEV
10.0
Max CVSS
13
New 30D
Vulnerabilities219In the news0Timeline
Severity mix
Critical 42High 92Medium 85Low 0
Severity
All severities219Critical42High92Medium85Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add siyuan to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-65607
6.5
1%
Jul 23
SiYuan before v3.7.2 Path Traversal via /export/temp/
Affected: before 3.7.2
CVE-2026-59853
6.5
0%
Jul 9
SiYuan: Publish-mode Reader can exfiltrate private saved-search Criteria via /api/storage/getCriteria (missing publish-access filter)
Affected: < 3.7.1
CVE-2026-40107
6.5
0%
Apr 9
SiYuan Affected by Zero-Click NTLM Hash Theft and Blind SSRF via Mermaid Diagram Rendering
Affected: < 3.6.4
CVE-2026-32938
6.5
0%
Mar 20
SiYuan has an Arbitrary File Read in its Desktop Publish Service
Affected: < 3.6.1
CVE-2026-32704
6.5
0%
Mar 13
SiYuan renderSprig: missing admin check allows any user to read full workspace DB
Affected: < 3.6.1
CVE-2026-23851
6.5
1%
Jan 19
SiYuan Vulnerable to Arbitrary File Read via File Copy Functionality
Affected: < 3.5.4
CVE-2026-116168
New
6.2
0%
Oct 25
SiYuan before v3.8.7 Path Traversal Local File Read via MCP Asset Tool
Affected: before 3.8.7
CVE-2026-73047
6.2
0%
Aug 15
siyuan before v3.7.4 Server-Side Template Injection via attribute-view
Affected: before 3.7.4
CVE-2026-34605
6.1
0%
Mar 31
SiYuan: Reflected XSS via SVG namespace prefix bypass in SanitizeSVG ( getDynamicIcon, unauthenticated )
Affected: >= 3.6.0, < 3.6.2
CVE-2026-32940
6.1
0%
Mar 20
SiYuan has a SanitizeSVG bypass via data:text/xml in getDynamicIcon (incomplete fix for CVE-2026-29183)
Affected: < 3.6.1
CVE-2026-31809
6.1
1%
Mar 10
SiYuan has a SVG Sanitizer Bypass via Whitespace in `javascript:` URI — Unauthenticated XSS
Affected: < 3.5.10
CVE-2026-31807
6.1
0%
Mar 10
SiYuan has a SVG Sanitizer Bypass via `<animate>` Element — Unauthenticated XSS
Affected: < 3.5.10
CVE-2026-29183
6.1
1%
Mar 6
SiYuan: Unauthenticated reflected SVG XSS in `/api/icon/getDynamicIcon` (`type=8`) enables arbitrary JavaScript execution
Affected: < 3.5.9
CVE-2026-23847
6.1
0%
Jan 19
SiYuan Vulnerable to Reflected Cross-Site Scripting (XSS) via /api/icon/getDynamicIcon
Affected: < 3.5.4
CVE-2026-23645
6.1
0%
Jan 16
SiYuan Vulnerable to Stored Cross-Site Scripting (XSS) via Unrestricted SVG File Upload
Affected: < 3.5.4-dev2
CVE-2026-100635
5.9
0%
Sep 26
SiYuan before v3.8.4 Authentication Bypass via Plaintext Session Cookie
Affected: before 3.8.4
CVE-2026-54068
5.9
4%
Jun 24
SiYuan: Unauthenticated SQLite Data Exfiltration via Template Injection in /api/icon/getDynamicIcon
Affected: < 3.7.0
CVE-2026-103763
5.8
0%
Oct 2
SiYuan before v3.8.5 Information Disclosure via /api/notebook/getNotebookInfo
Affected: before 3.8.5
CVE-2026-73630
5.8
0%
Aug 14
SiYuan before v3.7.4 Information Disclosure via authFilePublishAccess
Affected: before 3.7.4
CVE-2026-73049
5.8
0%
Aug 14
SiYuan before v3.7.4 Information Disclosure via getAttributeViewBacklinks
Affected: before 3.7.4
CVE-2026-73048
5.8
0%
Aug 14
SiYuan before v3.7.4 Information Disclosure via getRefIDsByFileAnnotationID
Affected: before 3.7.4
CVE-2026-73610
5.8
0%
Aug 13
SiYuan before v3.7.4 Information Disclosure via Local Storage
Affected: before 3.7.4
CVE-2026-73609
5.8
0%
Aug 13
SiYuan before v3.7.4 Information Disclosure via getBookmarkLabels
Affected: before 3.7.4
CVE-2026-73607
5.8
0%
Aug 13
SiYuan before v3.7.4 Information Disclosure via getOutlineStorage
Affected: before 3.7.4
CVE-2026-73606
5.8
0%
Aug 13
SiYuan before v3.7.4 Information Disclosure via getRefIDs
Affected: before 3.7.4
CVE-2026-73605
5.8
0%
Aug 13
SiYuan before v3.7.4 Path Traversal via getUniqueFilename
Affected: before 3.7.4
CVE-2026-72808
5.8
0%
Aug 12
SiYuan before v3.7.4 Information Disclosure via getFileAnnotation
Affected: before 3.7.4
CVE-2026-72806
5.8
0%
Aug 12
SiYuan before v3.7.4 Authentication Bypass via Attribute View
Affected: before 3.7.4
CVE-2026-72805
5.8
0%
Aug 12
SiYuan before v3.7.4 Information Disclosure via Block Endpoints
Affected: before 3.7.4
CVE-2026-72803
5.8
0%
Aug 12
SiYuan before v3.7.4 Information Disclosure via getBlockAttrs
Affected: before 3.7.4
CVE-2026-72800
5.8
0%
Aug 12
SiYuan before v3.7.4 Information Disclosure via Unfiltered API
Affected: before 3.7.4
CVE-2026-72799
5.8
0%
Aug 12
SiYuan before v3.7.4 Information Disclosure via Path Resolution
Affected: before 3.7.4
CVE-2026-72797
5.8
0%
Aug 12
SiYuan before v3.7.4 Information Disclosure via getEncryptedNotebookStatus
Affected: before 3.7.4
CVE-2026-72796
5.8
0%
Aug 12
SiYuan before v3.7.4 Access Control Bypass via Static Routes
Affected: before 3.7.4
CVE-2026-72792
5.8
0%
Aug 12
SiYuan before v3.7.4 Information Disclosure via Tag API
Affected: before 3.7.4
CVE-2026-72791
5.8
0%
Aug 12
SiYuan before v3.7.4 Information Disclosure via getAttributeViewFieldViews
Affected: before 3.7.4
CVE-2026-72790
5.8
0%
Aug 12
SiYuan before v3.7.4 Information Disclosure via getNotebookInfo
Affected: before 3.7.4
CVE-2026-72788
5.8
0%
Aug 12
SiYuan before v3.7.4 Information Disclosure via UILayout Filter
Affected: before 3.7.4
CVE-2026-68585
5.8
0%
Aug 3
SiYuan before v3.7.3 Metadata Disclosure via getBlockInfo
Affected: before 3.7.3
CVE-2026-82233
5.7
0%
Aug 28
SiYuan before v3.8.1 Path Traversal via asset.upload
Affected: before 3.8.1
CVE-2026-116169
New
5.4
0%
Oct 25
SiYuan 2.10.0 before 3.8.7 Stored XSS via KaTeX \href in Math Blocks
Affected: 2.10.0 before 3.8.7
CVE-2026-40922
5.4
0%
Apr 16
SiYuan: Incomplete sanitization of bazaar README allows stored XSS via iframe srcdoc (incomplete fix for CVE-2026-33066)
Affected: < 3.6.4
CVE-2026-25647
5.4
0%
Feb 6
Lute has a Stored Cross-Site Scripting (XSS) via Markdown hyperlink
Affected: < 3.5.5
CVE-2024-55659
5.4
0%
Dec 11
SiYuan has an arbitrary file write in the host via /api/asset/upload
Affected: < 3.1.16
CVE-2026-105205
5.3
0%
Oct 4
SiYuan before 3.8.5 Information Disclosure via /api/block/getDocInfo and getDocsInfo
Affected: before 3.8.5
CVE-2026-103762
5.3
0%
Oct 2
SiYuan before v3.8.5 Missing Authorization in Save-Path Resolver Endpoints
Affected: before 3.8.5
CVE-2026-101092
5.3
0%
Sep 28
SiYuan before v3.8.4 Information Disclosure via getCurrentAttrViewImages
Affected: before 3.8.4
CVE-2026-87810
5.3
0%
Sep 9
Siyuan before v3.8.2 Information Disclosure via fullTextSearchBlock
Affected: before 3.8.2
CVE-2026-82652
5.3
0%
Aug 30
SiYuan before v3.8.1 Information Disclosure via Publish Access
Affected: before 3.8.1
CVE-2026-72802
5.3
0%
Aug 12
SiYuan before v3.7.4 Information Disclosure via resolveAssetPath
Affected: before 3.7.4
Page 4 of 5 · 219 total
1…345