SiYuan versions prior to v3.7.4 have a vulnerability where certain API endpoints do not enforce publish-access checks, allowing unauthorized disclosure of content and metadata from protected or forbidden documents. This affects the getBlockBreadcrumb, getRefText, and getBlockTreeInfos endpoints. Anonymous users or those with limited publish RoleReader permissions can access document titles, content snippets, reference text, and path metadata by supplying block IDs. The advisory is a duplicate and has been withdrawn in favor of GHSA-67x2-mq63-v9vm.