SiYuan
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 132 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 4, 2024 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →SiYuan v3.1.12 before v3.8.6 Denial of Service via getDynamicIcon Template
SiYuan v3.7.0 before v3.8.6 Arbitrary File Read via Plugin ResponseFile.Path
SiYuan before 3.8.5 Information Disclosure via /api/block/getDocInfo and getDocsInfo
SiYuan before 3.8.5 Information Disclosure via /api/export/preview
SiYuan before v3.8.5 Information Disclosure via /api/notebook/getNotebookInfo
SiYuan before v3.8.5 Missing Authorization in Save-Path Resolver Endpoints
SiYuan before v3.8.4 Information Disclosure via getCurrentAttrViewImages
SiYuan before v3.8.4 SQL Injection via Block Query Embed
SiYuan before v3.8.4 Authentication Bypass via Missing Origin Header
SiYuan 3.7.0 before 3.8.4 Stored XSS via Gallery Kanban
Monitor SiYuan in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.