← All credits
alham-rizvi
53 vulnerability records and advisories credit this contributor.
CVE-2026-60084
SiYuan before v3.7.4 Arbitrary File Deletion via removeTemplate
CVE-2026-60083
SiYuan before v3.8.0 Incomplete Path Blocklist via MCP file tool
CVE-2026-74904
SiYuan before v3.7.4 Missing Authorization via block API
CVE-2026-74867
SiYuan before 3.7.4 Cross-Site Request Forgery via CheckAuth
CVE-2026-74798
SiYuan kernel Path Traversal via database_clean MCP tool
CVE-2026-74906
SiYuan before v3.7.4 Incorrect Authorization via Publish Access
CVE-2026-73045
SiYuan before 3.7.4 Brute-Force via authFilePublishAccess
CVE-2026-73056
SiYuan kernel before 3.7.4 Unthrottled Brute-Force via API Token
CVE-2026-73046
SiYuan before v3.7.4 Authentication Bypass via HTTP Basic Auth
CVE-2026-74800
SiYuan before v3.7.4 Stored XSS via assets endpoint