Security: siyuan-note/siyuan
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
SanitizeSVG bypass via data:text/xml in getDynamicIcon (incomplete fix for CVE-2026-29183)GHSA-4mx9-3c2h-hwhg published
Mar 16, 2026 by 88250Moderate -
Security Vulnerability Report: Authorization Bypass Allows Arbitrary SQL Execution via Search APIGHSA-j7wh-x834-p3r7 published
Mar 14, 2026 by 88250Critical -
importStdMd: unvalidated localPath imports arbitrary host directories as persistent notesGHSA-rjhh-m223-9qqv published
Mar 14, 2026 by 88250Moderate -
globalCopyFiles: incomplete sensitive path blocklist allows reading /proc and Docker secretsGHSA-h5vh-m7fg-w5h6 published
Mar 14, 2026 by 88250Moderate -
importSY/importZipMd: path traversal via multipart filename enables arbitrary file writeGHSA-qvvf-q994-x79v published
Mar 14, 2026 by 88250High -
renderSprig: missing admin check allows any user to read full workspace DBGHSA-4j3x-hhg2-fm2x published
Mar 13, 2026 by 88250Moderate -
Full-Read SSRF via /api/network/forwardProxyGHSA-56cv-c5p2-j2wg published
Mar 11, 2026 by 88250High -
Remote Code Execution via Stored XSS in Notebook Name - Mobile InterfaceGHSA-qr46-rcv3-4hq3 published
Mar 14, 2026 by 88250Critical -
Cross-Origin WebSocket Hijacking via Authentication Bypass — Unauthenticated Information DisclosureGHSA-xp2m-98x8-rpj6 published
Mar 14, 2026 by 88250High -
Remote Code Execution via Malicious Bazaar Package — Marketplace XSSGHSA-v3mg-9v85-fcm7 published
Mar 14, 2026 by 88250Critical