Mmastodon TechnologyCybersecurity first seen 16 h ago, last 16 h ago, peak #12

SiYuan note-taking app hit by denial-of-service vulnerability

Original: 🚨 EUVD-2026-97612 📊 Score: 7.1/10 (CVSS v3.1) 📦 Product: SiYuan 🏢 Vendor: siyuan-note 📅 Updated: 2026-10-12 📝 SiYuan v3.

A medium-severity vulnerability, EUVD-2026-97612, has been catalogued against SiYuan, the open-source note-taking application from siyuan-note. Versions 3.1.12 through before 3.8.6 fail to restrict the Sprig template function map in the /api/icon/getDynamicIcon content parameter, allowing attackers to cause resource exhaustion. Users are advised to update to v3.8.6 or later.

Why now: Security feeds have flagged a newly updated vulnerability in a widely used self-hosted note-taking app, prompting admins to check their versions.

SiYuansiyuan-noteEUVD-2026-97612

Open on mastodon →

Evidence

• 🚨 EUVD-2026-97612 📊 Score: 7.1/10 (CVSS v3.1) 📦 Product: SiYuan 🏢 Vendor: siyuan-note 📅 Updated: 2026-10-12 📝 SiYuan v3.1.12 before v3.8.6 fails to restrict the Sprig template function map in the /api/icon/getDynamicIcon content parameter, allowing resource exhaustion. A… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/2011966