Threats Tagged 'ghsa-7fjj-5cqf-p4pm'

1 threat

Threats Tagged 'ghsa-7fjj-5cqf-p4pm'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.3%	CVE-2026-101091siyuan · SQL Injection High7.1EPSS 0.3%2026-09-28CVE Database V5CVE-2026-101091 SiYuan versions before v3.8.4 fail to properly validate SQL statements in block query embed blocks executed against siyuan.db. Attackers can craft malicious .sy documents with non-read-only SQL statements that execute automatically during background indexing, rendering, or export operations without authentication. EPSS 0.3%Vulnerability siyuan-note #ghsa-7fjj-5cqf-p4pm	CVE Database V5	2026-09-28

Showing 1–1 of 1 result