SiYuan
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 150 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 4, 2024 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →SiYuan before 3.8.9 Sensitive File Disclosure via /api/file/getFile
SiYuan 2.1.0 before 3.8.9 CAPTCHA Bypass via Stale Login Cookie
SiYuan from 3.6.0 before 3.8.9 Publish-Password Bypass via getDoc Regex Keywords
SiYuan before 3.8.10 SSRF via Skill-Install Download Redirect and DNS Rebinding
SiYuan 3.7.0 before 3.8.10 Path Traversal File Write via MCP web_fetch
SiYuan 3.7.0 before 3.8.10 Path Traversal File Write via MCP web_fetch
SiYuan before 3.8.9 Nil Pointer Dereference DoS via MCP resources/read
SiYuan before 3.8.9 Nil Pointer Dereference DoS via MCP resources/read
SiYuan 3.8.7 through 3.8.8 Path Traversal via GLOBALROOT Alias
SiYuan 3.8.7 through 3.8.8 Path Traversal via GLOBALROOT Alias
Monitor SiYuan in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.