Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Release: siyuan-note siyuan 3.7.4 Clear all filters
TI-2026-52587 CVE-2026-74868 · GHSA-r2rg-wg48-xwhx

SiYuan before 3.7.4 Brute-Force Authentication via Publish Service

Priority MEDIUM 44

SiYuan versions before 3.7.4 contain an unthrottled brute-force vulnerability in the Publish Service Basic Auth implementation (PublishServiceTransport.RoundTrip() in kernel/server/proxy/publish.go).

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00514 Published 2026-08-17 Fixed in 3.7.4 CWE-307
TI-2026-52586 CVE-2026-74867 · GHSA-ph2h-92xh-5vmg

SiYuan before 3.7.4 Cross-Site Request Forgery via CheckAuth

Priority LOW 11

SiYuan versions before 3.7.4 contain a cross-site request forgery vulnerability in the session-cookie authentication branch of CheckAuth() that lacks Origin/Referer validation and sets no explicit SameSite attribute on s…

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00131 Published 2026-08-17 Fixed in 3.7.4 CWE-352
TI-2026-52566 CVE-2026-74802 · GHSA-3cc2-h3v6-rqpq

SiYuan 3.7.3 Cross-Site WebSocket Hijacking via network proxy

Priority MEDIUM 64

SiYuan versions before 3.7.4 contain a cross-site WebSocket hijacking vulnerability in the admin-only /ws/network/proxy endpoint that explicitly disables origin validation by setting CheckOrigin to unconditionally return…

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00164 Published 2026-08-17 Fixed in 3.7.4, 0.0.0-20260803045322-cb67e0b4fab5 CWE-346
TI-2026-52565 CVE-2026-74801 · GHSA-pmhp-gmf7-7vhj

SiYuan before 3.7.4 Local Privilege Escalation via elevator.exe

Priority HIGH 72

SiYuan before 3.7.4 fails to properly escape workspace directory paths when constructing command-line arguments for the elevated elevator.exe helper process.

CVSS 4.0HIGH 8.6 Local Low privileges User interaction EPSS 0.00205 Published 2026-08-17 Fixed in 3.7.4 CWE-78
TI-2026-52564 CVE-2026-74800 · GHSA-v4hj-628x-hq5x

SiYuan before v3.7.4 Stored XSS via assets endpoint

Priority MEDIUM 43

SiYuan before v3.7.4 fails to set Content-Disposition and X-Content-Type-Options headers when serving arbitrary file assets, allowing stored cross-site scripting attacks.

CVSS 4.0CRITICAL 9.4 Network Low privileges User interaction EPSS 0.00428 Published 2026-08-17 Fixed in 3.7.4 CWE-79
TI-2026-52563 CVE-2026-74799 · GHSA-hmr2-j8m8-f585

SiYuan before 3.7.4 Unauthenticated Debug Endpoint Information Disclosure

Priority HIGH 79

SiYuan before 3.7.4 registers Go net/http/pprof debug endpoints including heap and goroutine dumps without authentication when --mode flag is not set to exactly prod.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00544 Published 2026-08-17 Fixed in 3.7.4 CWE-215
TI-2026-52562 CVE-2026-74798 · GHSA-mwfp-66vr-j373

SiYuan kernel Path Traversal via database_clean MCP tool

Priority HIGH 75

SiYuan kernel before v3.7.4 contains a path traversal vulnerability in the database_clean MCP tool.

CVSS 4.0CRITICAL 9.3 Network High privileges No interaction EPSS 0.00506 Published 2026-08-17 Fixed in 3.7.4 CWE-22