SiYuan versions before v3.8.2 fail to properly filter private attribute-view cell values in the getAttributeViewKeys endpoint. Publish readers can retrieve hidden KeyValues payloads from rows bound to inaccessible documents, exposing private database contents without authorization.
2026年9月6日
CVE-2026-86192 [MEDIUM] – SiYuan versions before v3.8.2 fail to properly filter private attribute-view cell values i
📑 文章目录



