SiYuan versions prior to v3.7.4 have a vulnerability where certain API endpoints do not enforce publish-access checks, allowing unauthorized disclosure of content and metadata from protected or forbidden documents. This affects the getBlockBreadcrumb, getRefText, and getBlockTreeInfos endpoints. Anonymous users or those with limited publish RoleReader permissions can access document titles, content snippets, reference text, and path metadata by supplying block IDs. The advisory is a duplicate and has been withdrawn in favor of GHSA-67x2-mq63-v9vm.
SiYuan kernel versions up to 3.7.2 contain a vulnerability where the getGraph and getLocalGraph endpoints do not validate the publish-password tier. This allows anonymous users to access block-level content of password-protected documents without providing a password. The vulnerability has a critical severity with a CVSS score of 8.6. The advisory is a duplicate of GHSA-vpjw-wf5h-cgpq and no patch links are provided in this record.
SiYuan kernel versions up to 3.7.2 have a vulnerability where the getBlockAttrs and batchGetBlockAttrs endpoints do not enforce publish-access checks. This allows attackers to retrieve block attributes such as names, aliases, memos, and custom fields from protected documents without authorization. The advisory is a duplicate and references GHSA-qvq9-hq6p-v378. No patch links are provided in this data.
SiYuan versions up to 3.7.2 have an information disclosure vulnerability in the resolveAssetPath endpoint. This endpoint returns absolute filesystem paths in response to CheckAuth-only requests, allowing attackers to obtain the server's absolute workspace path, including the operating system username and installation layout. The advisory is a duplicate of GHSA-jv8v-xq2h-657v and has been withdrawn to preserve references.
SiYuan versions up to 3.7.2 have a vulnerability where publish-access filters are not enforced on certain filetree path-resolution endpoints. This allows unauthenticated users or any publish reader token to enumerate the entire private document tree, including hidden, password-protected, or publish-forbidden documents. The vulnerability has a CVSS score of 5.8, indicating medium severity. This advisory is a duplicate and has been withdrawn in favor of GHSA-5w7r-f4cg-rqq7.
SiYuan versions up to 3.7.2 contain a vulnerability in the renderAttributeView function that fails to properly filter related-database content. This allows anonymous users to access Relation and Rollup cell contents from hidden or password-protected databases. The flaw also permits bypassing row filtering when the first column is a non-block type. This advisory is a duplicate of GHSA-mfrj-v65r-979c and has been withdrawn to preserve references.
SiYuan versions up to 3.7.2 have an information disclosure vulnerability in the getEncryptedNotebookStatus endpoint. This flaw allows anonymous users and publish-mode accounts to retrieve encrypted notebook identifiers, names, and their current unlock status without proper access control. The vulnerability exposes sensitive notebook names and whether they are unlocked in memory. The advisory is a duplicate of GHSA-f2rw-w22v-54vh and has been withdrawn to preserve references. The CVSS score is 5.8, indicating a medium severity issue.
SiYuan before version 3.7.4 contains an access control bypass vulnerability where static-file routes bypass the publish-access controls enforced on the REST API. This allows attackers with publish reader tokens or anonymous access in disabled-auth mode to read templates, snippets, and export artifacts by directly accessing static routes that lack the same restrictions as the REST API. The advisory is a duplicate and has been withdrawn in favor of GHSA-fgmr-7w36-9qfq. No patch links are provided in this data.
Siyuan versions up to 3.7.2 expose the session cookie signing key via the /api/system/getConf endpoint to unauthenticated users in publish mode. This exposure allows attackers to retrieve the CookieKey and forge valid session cookies, potentially impersonating users or gaining administrative access. The vulnerability is classified as critical with a CVSS score of 8.6. This advisory is a duplicate of GHSA-34fj-mwm6-fjfg and has been withdrawn to preserve external references.
SiYuan versions up to 3.7.2 have a vulnerability where embedded block content is returned without proper publish-access filtering. This allows unauthorized anonymous users to access private and password-protected document content via specific API endpoints. The advisory is a duplicate and references GHSA-h6w7-xxcf-w2mq for the original report.
SiYuan versions up to 3.7.3 have a vulnerability in the /api/system/getConf endpoint where sensitive configuration fields are not properly masked for non-administrator users. This allows anonymous or publish-reader users to access secrets including the session-cookie signing key, OS username via the pandoc path, and encrypted-notebook key material. Exploitation can enable attackers to forge session cookies and impersonate users, potentially escalating to administrator privileges on instances without access-auth codes.
SiYuan before version 3.7.4 has an information disclosure vulnerability where the /api/tag/getTag endpoint returns tag labels and occurrence counts from password-protected documents to unauthenticated users. This allows attackers to enumerate tag vocabulary and internal terminology without entering the document's password. The advisory is a duplicate and has been withdrawn in favor of GHSA-mp7r-57w4-5qm3. The vulnerability has a medium severity rating with a CVSS score of 5.8.
SiYuan versions up to 3.7.2 have a vulnerability that exposes encrypted-notebook key-derivation material and wrapped notebook keys through unauthenticated endpoints in publish mode. This exposure allows attackers to obtain Argon2id parameters and wrapped keys, enabling unlimited offline cracking of the master password without rate limiting. The vulnerability has a high severity score of 7.5 and affects confidentiality but not integrity or availability.
SiYuan versions before v3.7.4 have a vulnerability where the getAttributeViewKeysByID endpoint does not apply publish-access filtering, allowing authenticated readers to access complete database column schemas. Additionally, two endpoints, getBlockDefIDsByRefText and getBlockRelevantIDs, enumerate workspace-wide block IDs without publish scoping, potentially exposing identifiers from hidden or password-protected documents. This advisory is a duplicate and has been withdrawn in favor of GHSA-5fhr-f75j-8wr9.
SiYuan versions up to and including v3.7.2 have a critical SQL injection vulnerability in the /api/search/searchEmbedBlock endpoint. This endpoint executes client-supplied SQL statements directly on the main read-write database handle without restrictions, allowing unauthenticated attackers or those with limited publish RoleReader access to read and modify content across all opened cleartext notebooks. The vulnerability is fixed in version v3.7.3.
SiYuan before version 3.7.3 contains a path traversal vulnerability in the attribute-view read endpoints due to improper validation of the avID parameter. This flaw allows authenticated users with RoleReader permissions or anonymous users (if publish authentication is disabled) to read JSON files outside the intended directory, potentially disclosing sensitive cross-scope database content. The advisory is a duplicate of GHSA-7hm9-v7vf-7g4w and has been withdrawn to preserve references.
SiYuan versions up to 3.7.2 have an information disclosure vulnerability in certain getHeading*Transaction endpoints. These endpoints return rendered block DOM content without verifying publish-access permissions. This allows anonymous users or those with limited publish RoleReader tokens to access full rendered content of documents that are publish-disabled and should be restricted.
SiYuan versions before v3.7.3 have a metadata disclosure vulnerability in the /api/block/getBlockInfo endpoint. This endpoint returns document root metadata such as title, notebook, path, root ID, and icon for documents that are marked as publish-forbidden without enforcing publish-access checks. As a result, anonymous users or users with publish RoleReader tokens can access metadata for documents that should be restricted. This advisory is a duplicate and has been withdrawn in favor of GHSA-pm3w-vxp9-ccwc.