SiYuan versions up to 3.7.2 have an information disclosure vulnerability in the getEncryptedNotebookStatus endpoint. This flaw allows anonymous users and publish-mode accounts to retrieve encrypted notebook identifiers, names, and their current unlock status without proper access control. The vulnerability exposes sensitive notebook names and whether they are unlocked in memory. The advisory is a duplicate of GHSA-f2rw-w22v-54vh and has been withdrawn to preserve references. The CVSS score is 5.8, indicating a medium severity issue.