https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T22:52:17.851646+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-87810 CVE-2026-87810 — Siyuan before v3.8.2 Information Disclosure via fullTextSearchBlock 2026-10-09T22:52:17.878382+00:00

Affected: siyuan-note siyuan

Siyuan before v3.8.2 contains an information disclosure vulnerability in the POST /api/search/fullTextSearchBlock endpoint that filters private blocks from results but returns unfiltered match counts. Unauthenticated publish-mode readers can submit arbitrary search terms to learn whether matching content exists in hidden or unpublished documents and determine the number of matching blocks and pages.