Threats tagged 'ghsa-7v6h-j59w-8qfp'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.3%	CVE-2026-73609siyuan · Missing Authorization Medium6.9EPSS 0.3%2026-08-13CVE Database V5CVE-2026-73609 SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getBookmarkLabels endpoint that returns all bookmark labels in the workspace without publish-access filtering. Anonymous readers and publish-mode readers can obtain the complete bookmark vocabulary across the workspace, disclosing subject matter and organizational information from inaccessible documents. EPSS 0.3%Vulnerability siyuan-note #ghsa-7v6h-j59w-8qfp	CVE Database V5	2026-08-13

Page 1 of 1