Siyuan: Duplicate Advisory: Unauthenticated SQL execution and REGEXP injection via fullTextSearchAssetContent (publish mode): reader-reachable raw SQL (method 2) and unescaped REGEXP (method 3) on…
Description
SiYuan versions before v3.7.3 contain critical SQL injection vulnerabilities in the fullTextSearchAssetContent endpoint. These vulnerabilities allow unauthenticated users and publish RoleReader tokens to execute arbitrary SQL commands on the asset-content database. The flaws involve unescaped method parameters and REGEXP clauses, enabling attackers to read, modify, or delete data across notebooks. This advisory is a duplicate and has been withdrawn in favor of GHSA-fph3-ghq9-vw66. No patch links are provided in this data.
CVSS v3.1
Score 10.0critical
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
SiYuan note-taking software versions prior to v3.7.3 have unauthenticated SQL injection vulnerabilities in the fullTextSearchAssetContent endpoint. Attackers can exploit unescaped input parameters and REGEXP clauses to execute arbitrary SQL commands on the read-write asset-content database. This can lead to unauthorized reading, modification, or deletion of cross-notebook data. The advisory is marked as a duplicate of GHSA-fph3-ghq9-vw66 and has been withdrawn accordingly. No explicit patch or remediation details are provided in this input.
Potential Impact
The vulnerabilities allow unauthenticated attackers to execute arbitrary SQL queries on the database, potentially leading to complete compromise of data integrity and confidentiality across notebooks. The CVSS score of 10 indicates critical impact with high confidentiality and integrity loss but no availability impact. This can result in unauthorized data disclosure, modification, or deletion.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory GHSA-fph3-ghq9-vw66 for current remediation guidance. Since this advisory is a duplicate and withdrawn, refer to the original advisory for official fixes or mitigation steps.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-pqpf-6vqv-6w92
- Osv Schema Version
- 1.4.0
- Ecosystems
- ["Go"]
- Database Specific Severity
- CRITICAL
- Cvss Version
- 3.1
Threat ID: 6a9ad521acd9273b49b68b2b
Added to database: 09/04/2026, 14:26:41 UTC
Last enriched: 09/07/2026, 12:22:18 UTC
Last updated: 10/04/2026, 04:33:13 UTC
Views: 57
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.