Open Source Vulnerabilities
github.com/siyuan-note/siyuan/kernel
SiYuan: Tag labels from password-protected documents are returned to readers who have not entered the password
github.com/siyuan-note/siyuan/kernel
SiYuan: Tag labels from password-protected documents are returned to readers who have not entered the password
github.com/siyuan-note/siyuan/kernel
SiYuan: Non-administrator responses from /api/system/getConf omit three secrets that the configuration-export path explicitly strips, disclosing the session-cookie signing key and the OS username to anonymous readers
github.com/siyuan-note/siyuan/kernel
SiYuan: Non-administrator responses from /api/system/getConf omit three secrets that the configuration-export path explicitly strips, disclosing the session-cookie signing key and the OS username to anonymous readers
github.com/siyuan-note/siyuan/kernel
SiYuan: Embedded (transclusion) block content is returned without publish-access filtering, leaking private and password-protected document content to anonymous readers
github.com/siyuan-note/siyuan/kernel
SiYuan: Embedded (transclusion) block content is returned without publish-access filtering, leaking private and password-protected document content to anonymous readers
github.com/siyuan-note/siyuan/kernel
SiYuan: The session-cookie signing key (Conf.CookieKey) is returned to anonymous readers by /api/system/getConf
github.com/siyuan-note/siyuan/kernel
SiYuan: The session-cookie signing key (Conf.CookieKey) is returned to anonymous readers by /api/system/getConf
org.springframework:framework-api, org.springframework:framework-docs, org.springframework:spring-aop, org.springframework:spring-aspects, org.springframework:spring-beans, org.springframework:spring-context, org.springframework:spring-context-indexer, org.springframework:spring-context-support, org.springframework:spring-core, org.springframework:spring-core-test, org.springframework:spring-expression, org.springframework:spring-framework-bom, org.springframework:spring-instrument, org.springframework:spring-jcl, org.springframework:spring-jdbc, org.springframework:spring-jms, org.springframework:spring-messaging, org.springframework:spring-orm, org.springframework:spring-oxm, org.springframework:spring-r2dbc, org.springframework:spring-test, org.springframework:spring-tx, org.springframework:spring-web, org.springframework:spring-webflux, org.springframework:spring-webmvc, org.springframework:spring-websocket
TuxCare security update for org.springframework (1 CVE)
org.springframework:framework-api/ org.springframework:framework-docs/ org.springframework:spring-aop/ org.springframework:spring-aspects/ org.springframework:spring-beans/ org.springframework:spring-context/ org.springframework:spring-context-indexer/ org.springframework:spring-context-support/ org.springframework:spring-core/ org.springframework:spring-core-test/ org.springframework:spring-expression/ org.springframework:spring-framework-bom/ org.springframework:spring-instrument/ org.springframework:spring-jcl/ org.springframework:spring-jdbc/ org.springframework:spring-jms/ org.springframework:spring-messaging/ org.springframework:spring-orm/ org.springframework:spring-oxm/ org.springframework:spring-r2dbc/ org.springframework:spring-test/ org.springframework:spring-tx/ org.springframework:spring-web/ org.springframework:spring-webflux/ org.springframework:spring-webmvc/ org.springframework:spring-websocket
TuxCare security update for org.springframework (1 CVE)
github.com/siyuan-note/siyuan/kernel
SiYuan: Static-file routes bypass the publish-access controls enforced on the REST API, exposing templates, snippets and export artifacts to anonymous readers
github.com/siyuan-note/siyuan/kernel
SiYuan: Static-file routes bypass the publish-access controls enforced on the REST API, exposing templates, snippets and export artifacts to anonymous readers
github.com/siyuan-note/siyuan/kernel
SiYuan: getEncryptedNotebookStatus discloses names and current lock/unlock state of all encrypted notebooks to anonymous readers
github.com/siyuan-note/siyuan/kernel
SiYuan: getEncryptedNotebookStatus discloses names and current lock/unlock state of all encrypted notebooks to anonymous readers
github.com/siyuan-note/siyuan/kernel
SiYuan: Publish-access filter on renderAttributeView leaves related-database content unfiltered and fails open on non-block first columns
github.com/siyuan-note/siyuan/kernel
SiYuan: Publish-access filter on renderAttributeView leaves related-database content unfiltered and fails open on non-block first columns
github.com/siyuan-note/siyuan/kernel
SiYuan: Missing publish-access filter on the HPath/path-resolution endpoints discloses the private document tree to anonymous readers
github.com/siyuan-note/siyuan/kernel
SiYuan: Missing publish-access filter on the HPath/path-resolution endpoints discloses the private document tree to anonymous readers
surrealdb-core
SurrealDB: Writes in a PERMISSIONS clause bypass table permissions
surrealdb-core
SurrealDB: Writes in a PERMISSIONS clause bypass table permissions
velero-plugin-for-microsoft-azure-fips
velero-plugin-for-microsoft-azure-fips
velero-plugin-for-microsoft-azure
velero-plugin-for-microsoft-azure
