← All reports

The SiYuan note-taking application has a vulnerability that allows password-protected documents to be referenced by unauthorized users.

CybersecurityTechnologyConflictOct 1, 2026score 0.182 posts · 0 replies across 1 instances
This thread discusses two vulnerabilities in the SiYuan note-taking application, highlighting security issues related to password-protected documents and anonymous access to bookmark labels.

Claims

The SiYuan note-taking application has a vulnerability that allows password-protected documents to be referenced by unauthorized users.
Parent: CybersecurityEntity: SiYuan note-taking applicationImpact: negativeDate: Oct 1, 2026Target: Security of the SiYuan note-taking application
The SiYuan note-taking application has a vulnerability that allows anonymous readers to access all bookmark labels in the workspace.
Parent: CybersecurityEntity: SiYuan note-taking applicationImpact: negativeDate: Oct 1, 2026Target: Security of the SiYuan note-taking application

Source posts

@[email protected]
🚨 EUVD-2026-57810 📊 Score: 6.9/10 (CVSS v3.1) 📦 Product: SiYuan 🏢 Vendor: siyuan-note 📅 Updated: 2026-10-01 📝 SiYuan: The reference filter for getRefIDs checks visibility but not the password tier, disclosing that password-protected documents reference a given block 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-57810 #cybersecurity #infosec #euvd #cve #vulnerability
0 boosts · 0 favs · 0 replies · Oct 1, 2026
#cybersecurity#infosec#euvd#cve#vulnerability
@[email protected]
🚨 EUVD-2026-57813 📊 Score: 6.9/10 (CVSS v3.1) 📦 Product: SiYuan 🏢 Vendor: siyuan-note 📅 Updated: 2026-10-01 📝 SiYuan: getBookmarkLabels returns every bookmark label in the workspace to anonymous readers, with no publish-access filtering 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-57813 #cybersecurity #infosec #euvd #cve #vulnerability
1 boosts · 0 favs · 0 replies · Oct 1, 2026
#cybersecurity#infosec#euvd#cve#vulnerability