Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:37:54 +0000 fkie_cve-2026-73606 https://vulnerability.circl.lu/vuln/fkie_cve-2026-73606 <p>SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/block/getRefIDs endpoint that fails to check password-protected document tiers. Unauthenticated readers can discover that password-protected documents reference specific blocks and obtain block identifiers without entering the document password.</p> <p>SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/block/getRefIDs endpoint that fails to check password-protected document tiers. Unauthenticated readers can discover that password-protected documents reference specific blocks and obtain block identifiers without entering the document password.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-73606 Withdrawn: GHSA-gq43-vcrh-6jw8 — Duplicate Advisory: The reference filter for getRefIDs checks visibility but not the password tier, disclosing that pas… https://vulnerability.circl.lu/vuln/ghsa-gq43-vcrh-6jw8 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Go: github.com/siyuan-note/siyuan/kernel</p> <p>## Duplicate Advisory</p> <p>This advisory has been withdrawn because it is a duplicate of GHSA-vg99-7gj7-2fr5. This link is maintained to preserve external references.</p> <p>## Original Description SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/block/getRefIDs endpoint that fails to check password-protected document tiers. Unauthenticated readers can discover that password-protected documents reference specific blocks and obtain block identifiers without entering the document password.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Go: github.com/siyuan-note/siyuan/kernel</p> <p>## Duplicate Advisory</p> <p>This advisory has been withdrawn because it is a duplicate of GHSA-vg99-7gj7-2fr5. This link is maintained to preserve external references.</p> <p>## Original Description SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/block/getRefIDs endpoint that fails to check password-protected document tiers. Unauthenticated readers can discover that password-protected documents reference specific blocks and obtain block identifiers without entering the document password.</p> https://vulnerability.circl.lu/vuln/ghsa-gq43-vcrh-6jw8