目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

siyuan-note 厂商漏洞列表 / CVE 中文分析 153

siyuan-note 厂商相关 153 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

SiYuan Note 是一款开源双链笔记应用，核心用途为本地优先的知识管理与内容创作。截至最新统计，该项目已收录 51 条 CVE，历史漏洞多集中于跨站脚本（XSS）、任意文件读取及越权访问，部分版本存在远程代码执行风险。其安全特性强调数据本地化存储，但插件系统与 Web 接口曾暴露攻击面。用户需关注官方更新以修复已知缺陷，确保笔记数据安全。

找到 153 条结果 / 153 清除筛选
Top products by siyuan-note: siyuan
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-72792 SiYuan 授权问题漏洞 — siyuan CWE-863 5.8 Medium 2026-08-12
CVE-2026-72791 SiYuan 授权问题漏洞 — siyuan CWE-862 5.8 Medium 2026-08-12
CVE-2026-72790 SiYuan 授权问题漏洞 — siyuan CWE-862 5.8 Medium 2026-08-12
CVE-2026-72788 SiYuan 授权问题漏洞 — siyuan CWE-863 5.8 Medium 2026-08-12
CVE-2026-72789 SiYuan 授权问题漏洞 — siyuan CWE-862 8.6 High 2026-08-12
CVE-2026-69086 SiYuan 路径遍历漏洞 — siyuan CWE-22 7.7 High 2026-08-03
CVE-2026-69085 SiYuan SQL注入漏洞 — siyuan CWE-89 10.0 Critical 2026-08-03
CVE-2026-69084 SiYuan SQL注入漏洞 — siyuan CWE-89 10.0 Critical 2026-08-03
CVE-2026-68587 SiYuan 授权问题漏洞 — siyuan CWE-862 8.6 High 2026-08-03
CVE-2026-69083 SiYuan SQL注入漏洞 — siyuan CWE-89 10.0 Critical 2026-08-03
CVE-2026-68586 SiYuan 授权问题漏洞 — siyuan CWE-862 8.6 High 2026-08-03
CVE-2026-68585 SiYuan 授权问题漏洞 — siyuan CWE-862 5.8 Medium 2026-08-03
CVE-2026-68584 SiYuan 授权问题漏洞 — siyuan CWE-288 8.6 High 2026-08-03
CVE-2026-66396 思源笔记本 v3.7.2 前存储XSS致远程代码执行 — siyuan CWE-79 8.4 High 2026-07-27
CVE-2026-66395 思源笔记 v3.7.2 前反射型 XSS 转远程代码执行漏洞 — siyuan CWE-79 9.6 Critical 2026-07-27
CVE-2026-66394 思源笔记 v3.7.3 前 SVG 过滤器绕过存储和反射型 XSS 漏洞 — siyuan CWE-79 8.7 High 2026-07-27
CVE-2026-66012 SiYuan 授权问题漏洞 — siyuan CWE-862 10.0 Critical 2026-07-25
CVE-2026-65607 siyuan-note siyuan 路径遍历漏洞 — siyuan CWE-22 6.5 Medium 2026-07-23
CVE-2026-65606 SiYuan 跨站脚本漏洞 — siyuan CWE-79 9.6 Critical 2026-07-23
CVE-2026-65605 siyuan-note siyuan 跨站脚本漏洞 — siyuan CWE-79 9.6 Critical 2026-07-23
CVE-2026-59854 SiYuan 处理逻辑错误漏洞 — siyuan CWE-693 4.9 Medium 2026-07-09
CVE-2026-59853 SiYuan 授权问题漏洞 — siyuan CWE-862 6.5 Medium 2026-07-09
CVE-2026-59855 SiYuan 跨站脚本漏洞 — siyuan CWE-80 - - 2026-07-09
CVE-2026-59832 SiYuan 路径遍历漏洞 — siyuan CWE-22 7.7 High 2026-07-09
CVE-2026-59833 SiYuan 输出处理不当漏洞 — siyuan CWE-79 - - 2026-07-09
CVE-2026-59834 SiYuan SQL注入漏洞 — siyuan CWE-89 7.5 High 2026-07-09
CVE-2026-55570 siyuan-note SiYuan 输出处理不当漏洞 — siyuan CWE-79 9.0 Critical 2026-06-24
CVE-2026-54759 siyuan-note siyuan 跨站脚本漏洞 — siyuan CWE-79 - - 2026-06-24
CVE-2026-50551 SiYuan 跨站脚本漏洞 — siyuan CWE-79 9.9 Critical 2026-06-24
CVE-2026-54158 siyuan-note SiYuan 配置错误漏洞 — siyuan CWE-79 9.9 Critical 2026-06-24

本页汇总了 siyuan-note 厂商截至目前公开的全部 153 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。