github.com/siyuan-note/siyuan/kernel vulnerabilities (Go)
114 vulnerabilities.
-
github.com/siyuan-note/siyuan/kernelGo SiYuan: The publish filter for local storage returns the administrator's entire storage map with only three keys sanitized 5.8 Medium -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.8.2 TLS Private Key Disclosure via getFile 8.7 High -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.8.1 Missing Authorization via /history and /repo/diff 6.9 Medium -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.8.1 SSRF via DNS-Rebinding TOCTOU 8.4 High -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.8.1 Path Traversal via asset.upload 6.9 Medium -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Plugin Overwrite via Bazaar Install 5.9 Medium -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.8.0 Incomplete Path Blocklist via MCP file tool 6.9 Medium -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Missing Authorization via block API 8.7 High -
github.com/siyuan-note/siyuan/kernelGo SiYuan 3.7.3 Cross-Site WebSocket Hijacking via network proxy 7.1 High -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Authentication Bypass via WebSocket 8.7 High -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Information Disclosure via authFilePublishAccess 6.9 Medium -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Information Disclosure via getAttributeViewBacklinks 6.9 Medium -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Missing Authorization via refreshBacklink 6.9 Medium -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 SQL Injection via backlink search 9.9 Critical -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Publish-Boundary Bypass via WebSocket 9.2 Critical -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Information Disclosure via getBookmarkLabels 6.9 Medium -
github.com/siyuan-note/siyuan/kernelGo SiYuan v3.7.4-alpha.2 Authorization Bypass via getAttributeViewSearchTarget 9.2 Critical -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Information Disclosure via getOutlineStorage 6.9 Medium -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Information Disclosure via getRefIDs 6.9 Medium -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Path Traversal via getUniqueFilename 6.9 Medium -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Authentication Bypass via Localhost Trust 7.1 High -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Information Disclosure via getFileAnnotation 6.9 Medium -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 SQL Injection via queryBlocks template 8.8 High -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Authentication Bypass via Attribute View 6.9 Medium -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Information Disclosure via Block Endpoints 6.9 Medium -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Authentication Bypass via Graph Endpoints 9.2 Critical -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Information Disclosure via getBlockAttrs 6.9 Medium -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Information Disclosure via resolveAssetPath 6.9 Medium -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Information Disclosure via Encryption Key Material 8.7 High -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Information Disclosure via Unfiltered API 6.9 Medium -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Information Disclosure via Path Resolution 6.9 Medium -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Information Disclosure via renderAttributeView 9.2 Critical -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Information Disclosure via getEncryptedNotebookStatus 6.9 Medium -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Access Control Bypass via Static Routes 6.9 Medium -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Information Disclosure via Embed Block 9.2 Critical -
github.com/siyuan-note/siyuan/kernelGo siyuan before v3.7.4 Session Cookie Key Disclosure via getConf 9.2 Critical -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Information Disclosure via /api/system/getConf 9.2 Critical -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Information Disclosure via Tag API 6.9 Medium -
github.com/siyuan-note/siyuan/kernelGo SiYuan v3.7.4-alpha.1 Information Disclosure via getAttributeViewFieldViews 6.9 Medium -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Information Disclosure via getNotebookInfo 6.9 Medium -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Authentication Bypass via Encrypted Notebooks 9.2 Critical -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.4 Information Disclosure via UILayout Filter 6.9 Medium -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.3 Path Traversal via unvalidated avID 8.3 High -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.3 SQL Injection via searchDocs 9.9 Critical -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.3 SQL Injection via searchEmbedBlock 9.9 Critical -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.3 SQL Injection via fullTextSearchAssetContent 9.9 Critical -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.3 Information Disclosure via getHeading*Transaction 9.2 Critical -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.3 Content Disclosure via getBacklinkDoc 9.2 Critical -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.3 Metadata Disclosure via getBlockInfo 6.9 Medium -
github.com/siyuan-note/siyuan/kernelGo SiYuan before v3.7.3 Authentication Bypass via Content Endpoints 9.2 Critical - Show olderLoading…