siyuan-note vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-116167 SiYuan from 2.9.0 before 3.8.7 contains a cross-site scripting vulnerability in the unauthenticated /check-auth page that assigns the to parameter to window.locHigh 7.6 · Oct 25, 2026
• CVE-2026-116166 SiYuan 3.6.0 before 3.8.7 accepts and persists the networkServeTLS setting but never enforces it, so the kernel port keeps serving full API access over plain HTHigh 7.6 · Oct 25, 2026
• CVE-2026-109310 SiYuan v3.1.12 before v3.8.6 fails to restrict the Sprig template function map in the /api/icon/getDynamicIcon content parameter, allowing resource exhaustion.High 7.1 · Oct 12, 2026
• CVE-2026-104410 SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish readers to read password-protected and publish-disabled database rows vHigh 8.7 · Oct 2, 2026
• CVE-2026-101091 SiYuan versions before v3.8.4 fail to properly validate SQL statements in block query embed blocks executed against siyuan.db.High 7.1 · Sep 28, 2026
• CVE-2026-100646 SiYuan is a self-hosted personal knowledge management system.High 8.6 · Sep 26, 2026
• CVE-2026-100645 SiYuan versions 3.7.0 before 3.8.4 contain a stored cross-site scripting vulnerability in gallery and kanban database renderers where field descriptions are notHigh 8.6 · Sep 26, 2026
• CVE-2026-100644 SiYuan before v3.8.4 contains a SQL injection vulnerability in the graph query endpoint where the dailyNoteSavePath parameter is concatenated into SQL without eHigh 8.7 · Sep 26, 2026
• CVE-2026-100643 SiYuan versions before v3.8.4 fail to properly escape four stored Attribute View values in textarea elements, allowing authenticated attackers to inject JavaScrHigh 8.5 · Sep 26, 2026
• CVE-2026-100642 SiYuan versions from v2.1.0 before v3.8.4 contain a cross-site request forgery vulnerability in the CheckAuth lock-screen pass-through branch that grants adminiHigh 7.2 · Sep 26, 2026
• CVE-2026-100641 SiYuan before v3.8.4 does not HTML-escape stored flashcard block content before interpolating it into the card-manager list markup.High 8.6 · Sep 26, 2026
• CVE-2026-100640 SiYuan before v3.8.4 contains an authorization omission in the siyuan-get IPC handler that allows remote-kernel renderers to access native clipboard formats by High 8.6 · Sep 26, 2026
• CVE-2026-100639 SiYuan v3.8.3 fails to HTML-escape the data-subtype attribute when generating gutter-button markup (app/src/protyle/gutter/button.ts, assigned via innerHTML in High 8.6 · Sep 26, 2026
• CVE-2026-100638 SiYuan versions before v3.8.4 contain a path traversal vulnerability in the setNotebookIcon endpoint that allows authenticated administrators to create arbitrarHigh 8.3 · Sep 26, 2026
• CVE-2026-100637 SiYuan versions before v3.8.4 contain a path traversal vulnerability in the checkoutRepo endpoint that allows authenticated administrators to write JSON files oHigh 8.3 · Sep 26, 2026
• CVE-2026-100636 SiYuan versions before v3.8.4 contain a path traversal vulnerability in the exportBrowserHTML endpoint that allows authenticated administrators to write arbitraHigh 8.3 · Sep 26, 2026
• CVE-2026-100635 SiYuan before v3.8.4 contains an authentication bypass vulnerability in the publish service where session cookies are issued without Secure or SameSite attributHigh 8.2 · Sep 26, 2026
• CVE-2026-100633 SiYuan is a self-hosted personal knowledge management system.High 8.5 · Sep 26, 2026
• CVE-2026-93923 SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark dock HTML, allowing stored cross-site scripting.High 8.6 · Sep 18, 2026
• CVE-2026-93922 SiYuan through 3.8.4 renders notebook names as raw HTML in the Daily Note picker dialog without escaping, allowing stored cross-site scripting in the Electron rHigh 8.6 · Sep 18, 2026
• CVE-2026-93591 SiYuan versions before 3.8.3 contain an SQL injection vulnerability in the graph.go query2Stmt function where tag values are concatenated raw into SQL string liHigh 7.2 · Sep 18, 2026
• CVE-2026-92986 SiYuan before 3.8.4 renders document titles as HTML in the backlink dock tree without escaping markup characters.High 8.6 · Sep 17, 2026
• CVE-2026-92985 SiYuan versions before 3.8.4 fail to escape bookmark labels imported from notebook files when rendering them in the dock tree.High 8.6 · Sep 17, 2026
• CVE-2026-87815 SiYuan versions before v3.8.2 contain a path traversal vulnerability in the /api/riff/removeRiffDeck endpoint that fails to validate the deckID parameter.High 8.4 · Sep 9, 2026
• CVE-2026-87814 SiYuan before v3.8.2 contains a stored cross-site scripting vulnerability in the search asset preview feature that fails to escape indexed asset content before High 8.4 · Sep 9, 2026