一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月6日

CVE-2026-86192 [MEDIUM] – SiYuan versions before v3.8.2 fail to properly filter private attribute-view cell values i

未分类
📑 文章目录

SiYuan versions before v3.8.2 fail to properly filter private attribute-view cell values in the getAttributeViewKeys endpoint. Publish readers can retrieve hidden KeyValues payloads from rows bound to inaccessible documents, exposing private database contents without authorization.