目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

siyuan-note 厂商漏洞列表 / CVE 中文分析 153

siyuan-note 厂商相关 153 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

SiYuan Note 是一款开源双链笔记应用，核心用途为本地优先的知识管理与内容创作。截至最新统计，该项目已收录 51 条 CVE，历史漏洞多集中于跨站脚本（XSS）、任意文件读取及越权访问，部分版本存在远程代码执行风险。其安全特性强调数据本地化存储，但插件系统与 Web 接口曾暴露攻击面。用户需关注官方更新以修复已知缺陷，确保笔记数据安全。

找到 153 条结果 / 153 清除筛选
Top products by siyuan-note: siyuan
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-62204 思源笔记 v3.7.4 前通过市场安装实现插件覆盖漏洞 — siyuan CWE-345 6.6 Medium 2026-08-22
CVE-2026-60084 思源笔记 v3.7.4前 任意文件删除漏洞 — siyuan CWE-22 8.7 High 2026-08-22
CVE-2026-60083 思源笔记 v3.8.0 前 MCP 文件工具路径不完整阻止漏洞 — siyuan CWE-863 4.9 Medium 2026-08-22
CVE-2026-59809 思源笔记 v3.8.0 前 http_request URL 密钥泄露漏洞 — siyuan CWE-201 4.9 Medium 2026-08-22
CVE-2026-77086 思源笔记 v3.7.4 之前通过包名的路径遍历漏洞 — siyuan CWE-22 9.1 Critical 2026-08-21
CVE-2026-75917 思源笔记 <3.7.4 通过路径处理漏洞实现远程代码执行 — siyuan CWE-79 8.6 High 2026-08-19
CVE-2026-75916 SiYuan 跨站脚本漏洞 — siyuan CWE-79 8.6 High 2026-08-19
CVE-2026-74906 SiYuan 授权问题漏洞 — siyuan CWE-863 7.5 High 2026-08-18
CVE-2026-74905 SiYuan 服务端请求伪造漏洞 — siyuan CWE-918 7.1 High 2026-08-18
CVE-2026-74904 SiYuan 授权问题漏洞 — siyuan CWE-862 7.5 High 2026-08-18
CVE-2026-74902 SiYuan 跨站脚本漏洞 — siyuan CWE-79 8.6 High 2026-08-18
CVE-2026-74903 SiYuan 资源管理错误漏洞 — siyuan CWE-400 4.3 Medium 2026-08-18
CVE-2026-74868 SiYuan 授权问题漏洞 — siyuan CWE-307 7.5 High 2026-08-17
CVE-2026-74867 SiYuan 跨站请求伪造漏洞 — siyuan CWE-352 4.2 Medium 2026-08-17
CVE-2026-74802 SiYuan 输入验证错误漏洞 — siyuan CWE-346 8.2 High 2026-08-17
CVE-2026-74801 SiYuan 命令注入漏洞 — siyuan CWE-78 8.2 High 2026-08-17
CVE-2026-74800 SiYuan 跨站脚本漏洞 — siyuan CWE-79 9.0 Critical 2026-08-17
CVE-2026-74799 SiYuan 调试信息泄露漏洞 — siyuan CWE-215 9.3 Critical 2026-08-17
CVE-2026-74798 SiYuan 路径遍历漏洞 — siyuan CWE-22 8.7 High 2026-08-17
CVE-2026-73056 SiYuan 授权问题漏洞 — siyuan CWE-307 9.8 Critical 2026-08-16
CVE-2026-73054 SiYuan 授权问题漏洞 — siyuan CWE-287 7.5 High 2026-08-15
CVE-2026-73052 SiYuan 跨站脚本漏洞 — siyuan CWE-79 9.0 Critical 2026-08-15
CVE-2026-73053 SiYuan 跨站脚本漏洞 — siyuan CWE-79 9.0 Critical 2026-08-15
CVE-2026-73050 SiYuan 跨站脚本漏洞 — siyuan CWE-79 9.0 Critical 2026-08-15
CVE-2026-73047 SiYuan 信息泄露漏洞 — siyuan CWE-200 6.2 Medium 2026-08-15
CVE-2026-73046 SiYuan 授权问题漏洞 — siyuan CWE-307 9.8 Critical 2026-08-15
CVE-2026-73045 SiYuan 授权问题漏洞 — siyuan CWE-307 7.5 High 2026-08-15
CVE-2026-73044 SiYuan 跨站脚本漏洞 — siyuan CWE-79 9.0 Critical 2026-08-15
CVE-2026-73042 SiYuan 跨站脚本漏洞 — siyuan CWE-79 9.0 Critical 2026-08-15
CVE-2026-73043 SiYuan 跨站脚本漏洞 — siyuan CWE-79 9.0 Critical 2026-08-15

本页汇总了 siyuan-note 厂商截至目前公开的全部 153 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。