siyuan-note

Thursday, October 1

• GitHub CVE-2026-69085
  SiYuan: Unauthenticated SQL injection in searchDocs via unescaped keyword (publish mode): cross-notebook read/write with statement stacking

  • siyuan-note siyuan
  • Critical
  • CVSS 10.0
  • EPSS 1.49%
  • Fixed version listed
  14:38 UTC