siyuan-note

Trends

1
SiYuan note-taking app patched over path traversal flaw●🚨 EUVD-2026-97611 📊 Score: 6.9/10 (CVSS v3.1) 📦 Product: SiYuan 🏢 Vendor: siyuan-note 📅 Updated: 2026-10-12 📝 SiYuan v3.Mmastodon Technology Cybersecurity06 d ago
A medium-severity vulnerability, tracked as EUVD-2026-97611 with a CVSS score of 6.9, has been disclosed in SiYuan, the open-source note-taking application by siyuan-note. Versions 3.7.0 before 3.8.6 contain an absolute path traversal flaw in the kernel's private plugin HTTP server. Users are advised to update to v3.8.6 or later.
2
SiYuan note-taking app hit by denial-of-service vulnerability●🚨 EUVD-2026-97612 📊 Score: 7.1/10 (CVSS v3.1) 📦 Product: SiYuan 🏢 Vendor: siyuan-note 📅 Updated: 2026-10-12 📝 SiYuan v3.Mmastodon Technology Cybersecurity06 d ago
A medium-severity vulnerability, EUVD-2026-97612, has been catalogued against SiYuan, the open-source note-taking application from siyuan-note. Versions 3.1.12 through before 3.8.6 fail to restrict the Sprig template function map in the /api/icon/getDynamicIcon content parameter, allowing attackers to cause resource exhaustion. Users are advised to update to v3.8.6 or later.