Mmastodon TechnologyCybersecurity first seen 7 d ago, last 7 d ago, peak #11

SiYuan note-taking app patched over path traversal flaw

Original: 🚨 EUVD-2026-97611 📊 Score: 6.9/10 (CVSS v3.1) 📦 Product: SiYuan 🏢 Vendor: siyuan-note 📅 Updated: 2026-10-12 📝 SiYuan v3.

A medium-severity vulnerability, tracked as EUVD-2026-97611 with a CVSS score of 6.9, has been disclosed in SiYuan, the open-source note-taking application by siyuan-note. Versions 3.7.0 before 3.8.6 contain an absolute path traversal flaw in the kernel's private plugin HTTP server. Users are advised to update to v3.8.6 or later.

Why now: Security trackers published the advisory and administrators of self-hosted SiYuan instances need to patch.

SiYuansiyuan-noteEUVD-2026-97611

Open on mastodon →

Evidence

• 🚨 EUVD-2026-97611 📊 Score: 6.9/10 (CVSS v3.1) 📦 Product: SiYuan 🏢 Vendor: siyuan-note 📅 Updated: 2026-10-12 📝 SiYuan v3.7.0 before v3.8.6 contains an absolute path traversal vulnerability in the kernel's private plugin HTTP server, which passes a kernel plugin handler's… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/2011965