目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

siyuan-note 厂商漏洞列表 / CVE 中文分析 190

siyuan-note 厂商相关 190 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

SiYuan Note 是一款开源双链笔记应用，核心用途为本地优先的知识管理与内容创作。截至最新统计，该项目已收录 51 条 CVE，历史漏洞多集中于跨站脚本（XSS）、任意文件读取及越权访问，部分版本存在远程代码执行风险。其安全特性强调数据本地化存储，但插件系统与 Web 接口曾暴露攻击面。用户需关注官方更新以修复已知缺陷，确保笔记数据安全。

Top products by siyuan-note: siyuan
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-93923 SiYuan 3.8.4 之前存储型XSS漏洞 — siyuan CWE-79 8.8 High 2026-09-18
CVE-2026-93922 SiYuan 3.8.4 存储型跨站脚本漏洞 — siyuan CWE-79 8.8 High 2026-09-18
CVE-2026-93921 SiYuan 3.8.4 访问控制绕过漏洞 — siyuan CWE-862 4.3 Medium 2026-09-18
CVE-2026-93591 SiYuan 3.8.3 之前 SQL 注入漏洞 — siyuan CWE-89 7.6 High 2026-09-18
CVE-2026-92985 SiYuan 3.8.4 以下书签标签跨站脚本漏洞 — siyuan CWE-79 8.8 High 2026-09-17
CVE-2026-92986 SiYuan 3.8.4 跨站脚本漏洞 — siyuan CWE-79 8.8 High 2026-09-17
CVE-2026-87815 SiYuan 输入验证错误漏洞 — siyuan CWE-73 8.7 High 2026-09-09
CVE-2026-87814 SiYuan 跨站脚本漏洞 — siyuan CWE-79 7.3 High 2026-09-09
CVE-2026-87813 SiYuan 跨站脚本漏洞 — siyuan CWE-79 7.3 High 2026-09-09
CVE-2026-87811 SiYuan 跨站脚本漏洞 — siyuan CWE-79 7.3 High 2026-09-09
CVE-2026-87812 SiYuan 跨站脚本漏洞 — siyuan CWE-79 6.8 Medium 2026-09-09
CVE-2026-87810 SiYuan 信息泄露漏洞 — siyuan CWE-200 5.3 Medium 2026-09-09
CVE-2026-87808 SiYuan 处理逻辑错误漏洞 — siyuan CWE-693 4.9 Medium 2026-09-09
CVE-2026-87809 SiYuan 授权问题漏洞 — siyuan CWE-639 6.5 Medium 2026-09-09
CVE-2026-87807 SiYuan SQL注入漏洞 — siyuan CWE-89 7.5 High 2026-09-09
CVE-2026-86712 SiYuan 跨站脚本漏洞 — siyuan CWE-79 8.8 High 2026-09-08
CVE-2026-86192 SiYuan 授权问题漏洞 — siyuan CWE-639 6.5 Medium 2026-09-05
CVE-2026-86191 SiYuan 授权问题漏洞 — siyuan CWE-639 4.3 Medium 2026-09-05
CVE-2026-85585 SiYuan 资源管理错误漏洞 — siyuan CWE-400 7.5 High 2026-09-04
CVE-2026-85584 SiYuan 资源管理错误漏洞 — siyuan CWE-770 7.5 High 2026-09-04
CVE-2026-85582 SiYuan 资源管理错误漏洞 — siyuan CWE-770 6.5 Medium 2026-09-04
CVE-2026-85583 SiYuan 后置链接漏洞 — siyuan CWE-59 6.5 Medium 2026-09-04
CVE-2026-85580 SiYuan 路径遍历漏洞 — siyuan CWE-22 6.5 Medium 2026-09-04
CVE-2026-85581 SiYuan 资源管理错误漏洞 — siyuan CWE-770 7.5 High 2026-09-04
CVE-2026-85579 SiYuan 授权问题漏洞 — siyuan CWE-639 4.3 Medium 2026-09-04
CVE-2026-85578 SiYuan 授权问题漏洞 — siyuan CWE-862 6.5 Medium 2026-09-04
CVE-2026-85175 SiYuan 权限许可和访问控制问题漏洞 — siyuan CWE-552 8.8 High 2026-09-03
CVE-2026-85174 SiYuan 日志信息泄露漏洞 — siyuan CWE-532 8.8 High 2026-09-03
CVE-2026-84803 SiYuan 跨站脚本漏洞 — siyuan CWE-79 9.0 Critical 2026-09-02
CVE-2026-82654 SiYuan 跨站脚本漏洞 — siyuan CWE-79 8.9 High 2026-08-30

本页汇总了 siyuan-note 厂商截至目前公开的全部 190 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。