SiYuan Note Unauthenticated SQL Injection & REGEXP Injection in fullTextSearchAssetContent (<=v3.7.2)

github.com 2026-08-03查看中文 →

Security AdvisoryCriticalSiYuan Note

Affected:

siyuan-note/siyuan <=v3.7.2

Fixed in:

v3.7.3

Referenced CVEs: CVE-2026-69083 · 10.0

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

node-sql-query SQL injection risk via deprecated sql-injection module 2026-08-09 SQL Fragment Injection in node-sql-query v0.1.25-0.1.28: Analysis and Fix 2026-08-09 Sequelize SQL Injection Fix and POC Analysis for Invalid Join Types 2026-08-09 Dolibarr TakePOS Missing Authorization Check in Invoice Operations Fix 2026-08-09 Dolibarr TakePOS Payment Manipulation via Missing Authorization (CWE-862) 2026-08-09

Offline Archive

Offline screenshot & PDF are Pro-exclusive