B3log

    Dashboard / Vendors

    Products: 5
    Vulnerabilities: 220
    Known Exploited: 0
    47
    Critical Level Threats
    79
    High Level Threats
    91
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-118680

    SiYuan 3.8.7 through 3.8.8 Path Traversal via GLOBALROOT Alias

    Last Modified: Nov 02, 2026
    Published: Oct 28, 2026

    CVE-2026-116171

    SiYuan 3.5.4 before 3.8.7 Sensitive Path Bypass via Windows Extended-Length Prefix

    Last Modified: Oct 28, 2026
    Published: Oct 25, 2026

    CVE-2026-116170

    SiYuan before v3.8.7 SQL Injection via History Search op and query

    Last Modified: Oct 29, 2026
    Published: Oct 25, 2026

    CVE-2026-116169

    SiYuan 2.10.0 before 3.8.7 Stored XSS via KaTeX \href in Math Blocks

    Last Modified: Oct 29, 2026
    Published: Oct 25, 2026

    CVE-2026-116168

    SiYuan before v3.8.7 Path Traversal Local File Read via MCP Asset Tool

    Last Modified: Nov 04, 2026
    Published: Oct 25, 2026
    Items Per Page