siyuan
v3.8.10An open-source, privacy-first, self-hosted knowledge workspace where humans and AI agents work together 开源、隐私优先、自托管的知识工作空间，让人与智能体在此协作
- Maintenance
- Active4333 commits in 3 months · bus factor 1
- License
- AGPL-3.0Copyleft · OSI-approved
- Security
- 30 advisories4 critical, 17 high, 9 medium · Scorecard 5.4/10
- Supported versions
- No scheduleendoflife.date does not track this project
47.2k stars · 3.1k forks · 9 open issues · last release 5 days ago · data checked 4 hours ago
Security advisories
All advisories on GitHubThe 30 most recent advisories published by the maintainers: 4 critical, 17 high, 9 medium. Check the patched version against the one you run.
- mediumGHSA-3chm-qrqv-98f4Nov 14, 2026Publish Reader Backmention API Leaks Keywords from Password-Gated Notes
- Affected
- 3.8.10
- Patched in
- v3.8.11
- mediumGHSA-jwj8-3ww9-3wm5Nov 14, 2026Global backlink contexts expose disabled Attribute View row metadata
- Affected
- be17ed1e0510bb6371cb8a162e16898a697fa118
- Patched in
- v3.8.11
- mediumGHSA-9x5w-qpj8-q39wNov 14, 2026getNotebookConf Missing Publish-Password Check Discloses Password-Gated Notebook Configuration
- Affected
- 3.8.10
- Patched in
- v3.8.11
- highGHSA-24v5-vjqf-qhv9Nov 12, 2026WebDAV Sync Index Path Traversal Overwrites a Workspace Note
- Affected
- v0.0.0-20261027083850-4ce2f57c199f
- Patched in
- v3.8.11
- highGHSA-x62v-7955-xx6vNov 11, 2026Stored XSS to desktop RCE: handler-named block (IAL) attributes become live DOM event handlers in the editor and preview
- Affected
- 3.8.10
- Patched in
- v3.8.11
- highGHSA-3rvg-qxwg-f3c6Nov 11, 2026AI agent chat panel renders the final assistant message as unsanitised HTML (DOM XSS, code execution on desktop)
- Affected
- >= 3.7.0, <= 3.8.10
- Patched in
- v3.8.11
- highGHSA-6fw6-h6p3-c6gfNov 11, 2026Publish-password lockout bypass via a client-computable `publish-auth-<ID>` cookie (incomplete fix for GHSA-v362-968x-gp2v)
- Affected
- >= 3.8.0, <= 3.8.10
- Patched in
- v3.8.11
- highGHSA-7258-5hpf-xq6wNov 9, 2026WebDAV Sync Error Notification XSS Enables Electron Code Execution
- Affected
- 3.8.9
- Patched in
- v3.8.10
- mediumGHSA-wg79-89vp-f9vwNov 8, 2026SiYuan's globalCopyFiles lets an admin token read other users' homes and host mounts
- Affected
- <= 3.8.9
- Patched in
- v3.8.10
- mediumGHSA-cvcw-64hw-hvhfNov 8, 2026SiYuan publish reader (RoleReader) writes workspace config via /api/system/getChangelog missing an authorization check
- Affected
- >= 3.8.6-beta.1, <= 3.8.9
- Patched in
- v3.8.10
- highGHSA-4mwh-6232-9frpNov 7, 2026World-Readable Workspace Config Exposes the Administrator Credential
- Affected
- >= 3.8.8, <= 3.8.8
- Patched in
- v3.8.10
- mediumGHSA-x5cg-xgq2-x369Nov 6, 2026LAN Sync Sends Device Metadata Before Authenticating Discovered Peers
- Affected
- fb3355f07d22bff36f1d785999fd5ded6a90d468
- Patched in
- v3.8.10
- highGHSA-xxqp-6jxw-qr84Nov 6, 2026Cross-document Asset Collision in Publish Authorization
- Affected
- v3.8.8
- Patched in
- v3.8.10
- highGHSA-vmvr-gf8m-x483Nov 6, 2026Reader getDOMText Exposes Cached OCR Text for Private Assets
- Affected
- 3.8.8
- Patched in
- v3.8.10
- highGHSA-gmcm-mggw-8759Nov 5, 2026Loopback Proxy X-Forwarded-For Trust Enables Authentication Bypass on the History Route
- Affected
- bfe36100477b7bbd66db1a8b8cff5547b2ccdb59
- Patched in
- v3.8.10
- highGHSA-qwg4-fj37-jjqqNov 5, 2026Reader Markdown Export Discloses Protected Block References
- Affected
- bfe36100477b7bbd66db1a8b8cff5547b2ccdb59
- Patched in
- v3.8.10
- highGHSA-q2x4-crw5-q567Nov 5, 2026Unfiltered disabled attribute-view rows expose indexed asset text
- Affected
- bfe36100477b7bbd66db1a8b8cff5547b2ccdb59
- Patched in
- v3.8.10
- highGHSA-vvqj-4crq-p53pNov 3, 2026Stored XSS to Desktop RCE via Attribute View Column Name (add/duplicate animation path)
- Affected
- <= v3.8.9
- Patched in
- v3.8.10
- criticalGHSA-3qqh-fmrp-8vfqNov 3, 2026SiYuan: incomplete fix for GHSA-56mp-4f3v-fgj2 and GHSA-5xfx-xj4h-5p7r, stored XSS to desktop RCE still reachable through the image src of an Attribute View asset cell
- Affected
- <= 3.8.9
- Patched in
- v3.8.10
- mediumGHSA-hq2c-hh95-vrr6Nov 1, 2026SiYuan 3.8.9: MCP web_fetch/http_request write fetched bytes outside temp/import on Windows via backslash in URL path
- Affected
- <=v3.8.9
- Patched in
- v3.8.10
- criticalGHSA-7gj8-xf7w-hfjfNov 1, 2026SiYuan: incomplete fix for GHSA-2h64-c999-c9r6, stored XSS to desktop RCE still reachable through an Attribute View name in the database row attribute panel
- Affected
- <= 3.8.9
- Patched in
- v3.8.10
- criticalGHSA-g275-mf26-qx9rNov 1, 2026Stored XSS Escalating to Arbitrary Code Execution via Unescaped Checkbox Column Name in AttributeView Gallery and Kanban Renderers
- Affected
- >= 3.3.0, <= 3.8.9
- Patched in
- v3.8.10
- criticalGHSA-v92g-4rrc-c6wvOct 31, 2026Stored XSS in Synced Table Captions Allows Client-side Remote Code Execution
- Affected
- <= 3.8.9
- Patched in
- v3.8.10
- highGHSA-4xfj-946m-258hOct 31, 2026Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in siyuan
- Affected
- <= 3.8.9
- Patched in
- v3.8.10
- mediumGHSA-6pg3-pqxw-jm82Oct 29, 2026Skill-install download is not on the ssrfSafeClient path: redirect and rebinding both reach internal addresses on v3.8.8
- Affected
- <=v3.8.9
- Patched in
- v3.8.10
- highGHSA-3pm7-cc76-7j2pOct 26, 2026Missing Sensitive-Path Guard in Widget Package File Retrieval
- Affected
- <= v3.8.8
- Patched in
- v3.8.9
- highGHSA-23g4-vqq8-5764Oct 26, 2026Stale Signed Login Cookie Reuses CAPTCHA Challenge
- Affected
- >= v2.1.0
- Patched in
- v3.8.9
- highGHSA-qf37-w288-frvqOct 26, 2026Publish-Password Bypass via getDoc Regex Keywords
- Affected
- >= 3.6.0
- Patched in
- v3.8.9
- mediumGHSA-2x3p-x74g-442xOct 22, 2026MCP resources/read triggers nil pointer panic in privateCacheMiddleware (v3.8.7/v3.8.8)
- Affected
- <=v3.8.8
- Patched in
- v3.8.9
- highGHSA-gg3p-r4g8-vxg2Oct 13, 2026SiYuan: \\?\GLOBALROOT alias bypasses IsSensitivePath (v3.8.7 fix incomplete) — API token + TLS keys copied into served assets
- Affected
- >= 3.5.4
- Patched in
- v3.8.7