https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-03T07:34:50.138483+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-85578 fkie_cve-2026-85578 2026-10-03T07:34:50.143698+00:00

SiYuan through 3.8.1 contains an authorization bypass vulnerability in the /api/file/getFile endpoint that allows readers to retrieve files from notebooks explicitly configured as Visible:false. Attackers with reader role can access private workspace files including notebook metadata and internal configuration by knowing the hidden notebook identifier and file path.

 https://db.gcve.eu/vuln/ghsa-fv97-ww8v-fw2w GHSA-fv97-ww8v-fw2w 2026-10-03T07:34:50.143936+00:00

SiYuan through 3.8.1 contains an authorization bypass vulnerability in the /api/file/getFile endpoint that allows readers to retrieve files from notebooks explicitly configured as Visible:false. Attackers with reader role can access private workspace files including notebook metadata and internal configuration by knowing the hidden notebook identifier and file path.