SiYuan versions before v3.7.4 have a vulnerability where the getAttributeViewKeysByID endpoint does not apply publish-access filtering, allowing authenticated readers to access complete database column schemas. Additionally, two endpoints, getBlockDefIDsByRefText and getBlockRelevantIDs, enumerate workspace-wide block IDs without publish scoping, potentially exposing identifiers from hidden or password-protected documents. This advisory is a duplicate and has been withdrawn in favor of GHSA-5fhr-f75j-8wr9.