cbcvebase.

Siyuan-Note Siyuan vulnerabilities

201 known vulnerabilities affecting siyuan-note/siyuan.

Total CVEs
201
CISA KEV
0
Public exploits
7
Exploited in wild
0
Severity breakdown
CRITICAL41HIGH90MEDIUM70

Vulnerabilities

Page 11 of 11
CVE-2026-74867P4MEDIUMCVSS 4.2fixed in 3.7.42026-08-17
CVE-2026-74867 [MEDIUM] CWE-352 CVE-2026-74867: SiYuan versions before 3.7.4 contain a cross-site request forgery vulnerability in the session-cooki SiYuan versions before 3.7.4 contain a cross-site request forgery vulnerability in the session-cookie authentication branch of CheckAuth() that lacks Origin/Referer validation and sets no explicit SameSite attribute on session cookies. Attackers can craft malicious web pages that perform unauthorized actions on behalf of authenticated users by submi
nvd
← Previous11 / 11
Siyuan-Note Siyuan vulnerabilities | cvebase