| CVE-2026-56397 |
SiYuan before v3.6.1 fails to sanitize package metadata and README content in the Bazaar marketplace, allowing malicious…
|
9.4
Critical
|
Jun 21, 2026 |
| CVE-2026-56395 |
SiYuan before v3.6.1 fails to sanitize package metadata and README content in the Bazaar marketplace, allowing malicious…
|
9.4
Critical
|
Jun 21, 2026 |
| CVE-2024-53507 |
A SQL injection vulnerability was discovered in Siyuan 3.1.11 in /getHistoryItems
|
9.8
Critical
|
Nov 29, 2024 |
| CVE-2024-53506 |
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the ids array parameter in /batchGetBlockAttrs
|
9.8
Critical
|
Nov 29, 2024 |
| CVE-2024-53505 |
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent
|
9.8
Critical
|
Nov 29, 2024 |
| CVE-2024-53504 |
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory
|
9.8
Critical
|
Nov 29, 2024 |
| CVE-2024-2692 |
SiYuan version 3.0.3 allows executing arbitrary commands on the server
|
9.0
Critical
|
Apr 4, 2024 |