cbcvebase.

Siyuan-Note Siyuan vulnerabilities

61 known vulnerabilities affecting siyuan-note/siyuan.

Total CVEs
61
CISA KEV
0
Public exploits
5
Exploited in wild
0
Severity breakdown
CRITICAL20HIGH25MEDIUM16

Vulnerabilities

Page 4 of 4
CVE-2026-45147P4MEDIUMCVSS 4.3fixed in 3.7.02026-05-14
CVE-2026-45147 [MEDIUM] CWE-285 CVE-2026-45147: SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, POST /api/tag/getTag SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, POST /api/tag/getTag is registered with model.CheckAuth only, omitting both model.CheckAdminRole and model.CheckReadonly, despite the handler performing a configuration write that is normally guarded by both. Any authenticated user — including publish-service RoleReader ac
nvd
← Previous4 / 4
Siyuan-Note Siyuan vulnerabilities | cvebase