{
  "schemaVersion": 1,
  "site": "https://cveboard.org",
  "generatedAt": "2026-10-23T20:15:07.764Z",
  "lastRun": "2026-10-23T20:01:03.754Z",
  "liveDays": 14,
  "filters": {
    "kind": null,
    "exploited": false,
    "severity": null,
    "ecosystems": [],
    "tag": "siyuan-note"
  },
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "incidents": [
    {
      "id": "cve-2026-69085",
      "url": "https://cveboard.org/i/cve-2026-69085",
      "urlPt": "https://cveboard.org/pt/i/cve-2026-69085",
      "json": "https://cveboard.org/i/cve-2026-69085.json",
      "kind": "vuln",
      "live": false,
      "knownExploited": false,
      "severity": "critical",
      "title": "SiYuan: Unauthenticated SQL injection in searchDocs via unescaped keyword (publish mode): cross-notebook read/write with statement stacking",
      "summary": "The /api/filetree/searchDocs endpoint concatenates the caller-supplied search keyword directly into a SQL statement with no escaping and no parameter binding. The endpoint is gated by CheckAuth only reachable by the publish RoleReader token, and by the anonymous account when Publish.Auth.Enable is false.",
      "titlePt": "SiYuan: Injeção de SQL não autenticada em searchDocs via palavra-chave não escapada (modo de publicação): leitura/escrita entre cadernos com empilhamento de instruções",
      "summaryPt": "O endpoint /api/filetree/searchDocs concatena a palavra-chave de busca fornecida pelo chamador diretamente em uma instrução SQL sem escape e sem vinculação de parâmetros. O endpoint é protegido por CheckAuth, acessível apenas pelo token RoleReader de publicação, e pela conta anônima quando Publish.Auth.Enable é falso.",
      "affected": [
        {
          "vendor": "siyuan-note",
          "product": "siyuan",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "status": "affected",
              "lessThan": "3.7.3",
              "lessThanOrEqual": null
            },
            {
              "version": "3.7.3",
              "status": "unaffected",
              "lessThan": null,
              "lessThanOrEqual": null
            }
          ],
          "omitted": 0,
          "fixed": [
            "3.7.3"
          ]
        }
      ],
      "omitted": 0,
      "references": [
        {
          "url": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-33jq-p8c2-q3q4",
          "tag": "vendor-advisory"
        }
      ],
      "cwes": [
        {
          "id": "CWE-89",
          "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
        }
      ],
      "ssvc": {
        "exploitation": "poc",
        "automatable": "yes",
        "impact": "total",
        "at": "2026-08-03T14:15:16.173Z"
      },
      "fix": "listed",
      "tags": [
        "siyuan-note",
        "go"
      ],
      "cves": [
        "CVE-2026-69085"
      ],
      "ghsa": "GHSA-33jq-p8c2-q3q4",
      "cvss": {
        "score": 10,
        "version": "3.1",
        "by": "GitHub"
      },
      "epss": {
        "percentage": 0.01488,
        "percentile": 0.73879,
        "asOf": "2026-10-23",
        "by": "FIRST"
      },
      "packages": [
        {
          "ecosystem": "go",
          "name": "github.com/siyuan-note/siyuan/kernel",
          "vulnerable": "< 0.0.0-20260721043339-eef10568384e",
          "fixed": "0.0.0-20260721043339-eef10568384e",
          "advisory": "GHSA-33jq-p8c2-q3q4"
        }
      ],
      "vendor": "siyuan-note",
      "product": "siyuan",
      "kev": null,
      "breach": null,
      "retracted": false,
      "sources": [
        {
          "label": "GitHub Advisory Database",
          "url": "https://github.com/advisories/GHSA-33jq-p8c2-q3q4"
        }
      ],
      "publishedAt": "2026-10-01T14:38:48.000Z",
      "updatedAt": "2026-10-01T14:38:48.000Z"
    }
  ],
  "tag": {
    "tag": "siyuan-note",
    "name": "siyuan-note",
    "kev": null
  }
}