Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 07:30:02 +0000 CVE-2026-72789 — SiYuan before v3.7.4 Authentication Bypass via Encrypted Notebooks https://vulnerability.circl.lu/vuln/cve-2026-72789 <p><strong>Affected:</strong> siyuan-note siyuan</p> <p>SiYuan before v3.7.4 fails to properly validate publish access for encrypted notebooks, treating them as publicly accessible by default. Anonymous readers can enumerate and retrieve fully decrypted document content from unlocked encrypted notebooks through the publish API without authentication or key material.</p> <p><strong>Affected:</strong> siyuan-note siyuan</p> <p>SiYuan before v3.7.4 fails to properly validate publish access for encrypted notebooks, treating them as publicly accessible by default. Anonymous readers can enumerate and retrieve fully decrypted document content from unlocked encrypted notebooks through the publish API without authentication or key material.</p> https://vulnerability.circl.lu/vuln/cve-2026-72789