Open Source Vulnerabilities

crossplane-provider-aws-devicefarm

crossplane-provider-aws-devicefarm

terraform-1.13

terraform-1.13

terraform-1.12

terraform-1.12

terraform-1.11

terraform-1.11

github.com/siyuan-note/siyuan/kernel

SiYuan: Missing publish-access filter on getAttributeViewKeysByID discloses database column schema, plus two unscoped block-ID enumeration oracles (publish mode)

temporal-server-fips

tdbg-fips, temporal-cassandra-tool-fips, temporal-server-fips, temporal-sql-tool-fips

tdbg-fips, temporal-cassandra-tool-fips, temporal-server-fips, temporal-sql-tool-fips

temporal-server

tdbg, temporal-cassandra-tool, temporal-server, temporal-sql-tool

tdbg, temporal-cassandra-tool, temporal-server, temporal-sql-tool

tempo-fips, tempo-fips-cli, tempo-fips-vulture

tempo-fips, tempo-fips-cli, tempo-fips-vulture

tempo-fips, tempo-fips-cli, tempo-fips-query, tempo-fips-vulture

github.com/siyuan-note/siyuan/kernel

SiYuan: Encrypted-notebook key-derivation material and wrapped notebook keys disclosed to anonymous readers, enabling offline master-password cracking

tempo, tempo-cli, tempo-vulture

tempo, tempo-cli, tempo-query, tempo-vulture

tempo, tempo-cli, tempo-vulture

teleport-fips-16

teleport-fips-16

teleport-16

teleport-16

github.com/siyuan-note/siyuan/kernel

SiYuan: Absolute filesystem path and OS username disclosure via resolveAssetPath

swagger-0.32

swagger-0.32

github.com/siyuan-note/siyuan/kernel

SiYuan: Missing publish-access filter on getBlockAttrs and batchGetBlockAttrs discloses block attributes (name, alias, memo, custom fields) of protected documents

spark-4.0-scala-2.13

spark-3.5-scala-2.12, spark-3.5-scala-2.13

github.com/siyuan-note/siyuan/kernel

SiYuan: Graph endpoints omit the publish-password tier: anonymous readers receive block-level content of password-protected documents

github.com/siyuan-note/siyuan/kernel

SiYuan: Missing publish-access check on getBlockBreadcrumb, getRefText, and getBlockTreeInfos discloses content and metadata of protected/forbidden documents

github.com/siyuan-note/siyuan/kernel

SiYuan: Password (protected) tier omitted in the attribute-view/database publish filter: Reader receives rows of protected documents without the password (publish mode)

crossplane-provider-aws-lambda-fips

crossplane-provider-aws-lambda-fips

crossplane-provider-aws-keyspaces-fips

crossplane-provider-aws-keyspaces-fips

github.com/siyuan-note/siyuan/kernel

SiYuan: Second-order SSTI to arbitrary SQL via attribute-view template column (queryBlocks): malicious imported package executes SQL on victim kernel

redpanda-25.1-fips

redpanda-25.1-fips

github.com/siyuan-note/siyuan/kernel

SiYuan: Missing publish-access filter on getFileAnnotation discloses private PDF annotations of forbidden/protected documents (publish mode)

cilium-1.20

cilium-1.20

cilium-1.20

cilium-1.20

cilium-1.20

cilium-1.20

cilium-1.20