Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: siyuan-note siyuan 3.8.1 Clear all filters
TI-2026-56992 CVE-2026-82654 · GHSA-5x6r-p3h7-38vj

SiYuan before v3.8.1 Stored XSS via block name

Priority MEDIUM 42

SiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint, backlink, and breadcrumb rendering functions.

CVSS 4.0CRITICAL 9.3 Network Low privileges User interaction EPSS 0.00366 Published 2026-08-30 Fixed in 3.8.1 CWE-79
TI-2026-56991 CVE-2026-82653 · GHSA-pxmq-4h62-hcr8

SiYuan before v3.8.1 Stored XSS via confirmDialog

Priority HIGH 75

SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog() where unescaped package names and notebook names are interpolated directly into innerHTML assignments.

CVSS 4.0CRITICAL 9.3 Network Low privileges User interaction EPSS 0.00366 Published 2026-08-30 Fixed in 3.8.1 CWE-79
TI-2026-56990 CVE-2026-82652 · GHSA-q9wp-phq7-jv7c

SiYuan before v3.8.1 Information Disclosure via Publish Access

Priority LOW 36

SiYuan before v3.8.1 fails to filter invisible-tier content from SQL embed blocks, attribute-view keys, and attribute-view backlinks in publish mode.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00343 Published 2026-08-30 Fixed in 3.8.1 CWE-668
TI-2026-56989 CVE-2026-82651 · GHSA-j8f5-rf5j-w7pm

SiYuan before v3.8.1 Missing Authorization via /history and /repo/diff

Priority LOW 31

SiYuan before v3.8.1 does not apply the IsForbiddenAbsPath guard (introduced in GHSA-c8r8-95hg-mp34) to the /history/*path and /repo/diff/*path endpoints in kernel/server/serve.go.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00477 Published 2026-08-30 Fixed in 3.8.1 CWE-200
TI-2026-56988 CVE-2026-82650 · GHSA-j5w2-98qv-mp97

SiYuan before v3.8.1 Path Traversal via /api/template/render

Priority LOW 26

SiYuan 3.8.0 contains a path traversal / sensitive file exposure vulnerability in the RenderTemplate function (kernel/model/template.go), reachable via the POST /api/template/render endpoint (kernel/api/template.go).

CVSS 4.0MEDIUM 5.9 Network High privileges No interaction EPSS 0.0035 Published 2026-08-30 Fixed in 3.8.1 CWE-668
TI-2026-56987 CVE-2026-82649 · GHSA-jrgp-6vq3-j6hp

SiYuan before 3.8.1 Local Privilege Escalation via Uncontrolled Search Path

Priority HIGH 72

SiYuan Windows installer before version 3.8.1 (affected versions >= 2.0.14) contains an uncontrolled search path element vulnerability in its NSIS installer, which invokes system executables such as TASKKILL by name rath…

CVSS 4.0HIGH 7.0 Local Low privileges User interaction EPSS 0.00173 Published 2026-08-30 Fixed in 3.8.1 CWE-427