Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:25:37 +0000 fkie_cve-2026-72795 https://db.gcve.eu/vuln/fkie_cve-2026-72795 <p>SiYuan versions before v3.7.4 fail to filter embedded block content by publish access in the getBlockDOMWithEmbed and getBlockDOMsWithEmbed endpoints. Attackers can request published blocks containing embed queries to read content from password-protected, hidden, or forbidden documents without authorization.</p> <p>SiYuan versions before v3.7.4 fail to filter embedded block content by publish access in the getBlockDOMWithEmbed and getBlockDOMsWithEmbed endpoints. Attackers can request published blocks containing embed queries to read content from password-protected, hidden, or forbidden documents without authorization.</p> https://db.gcve.eu/vuln/fkie_cve-2026-72795 Withdrawn: GHSA-cjwm-9h7g-pcr9 — Duplicate Advisory: Embedded (transclusion) block content is returned without publish-access filtering, leaking private… https://db.gcve.eu/vuln/ghsa-cjwm-9h7g-pcr9 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Go: github.com/siyuan-note/siyuan/kernel</p> <p>## Duplicate Advisory</p> <p>This advisory has been withdrawn because it is a duplicate of GHSA-h6w7-xxcf-w2mq. This link is maintained to preserve external references.</p> <p>## Original Description SiYuan versions before v3.7.4 fail to filter embedded block content by publish access in the getBlockDOMWithEmbed and getBlockDOMsWithEmbed endpoints. Attackers can request published blocks containing embed queries to read content from password-protected, hidden, or forbidden documents without authorization.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Go: github.com/siyuan-note/siyuan/kernel</p> <p>## Duplicate Advisory</p> <p>This advisory has been withdrawn because it is a duplicate of GHSA-h6w7-xxcf-w2mq. This link is maintained to preserve external references.</p> <p>## Original Description SiYuan versions before v3.7.4 fail to filter embedded block content by publish access in the getBlockDOMWithEmbed and getBlockDOMsWithEmbed endpoints. Attackers can request published blocks containing embed queries to read content from password-protected, hidden, or forbidden documents without authorization.</p> https://db.gcve.eu/vuln/ghsa-cjwm-9h7g-pcr9