https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T21:49:15.690038+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-21609 CVE-2025-21609 — SiYuan has an arbitrary file deletion vulnerability 2026-10-09T21:49:15.706471+00:00

Affected: siyuan-note siyuan

SiYuan is self-hosted, open source personal knowledge management software. SiYuan Note version 3.1.18 has an arbitrary file deletion vulnerability. The vulnerability exists in the `POST /api/history/getDocHistoryContent` endpoint. An attacker can craft a payload to exploit this vulnerability, resulting in the deletion of arbitrary files on the server. Commit d9887aeec1b27073bec66299a9a4181dc42969f3 fixes this vulnerability and is expected to be available in version 3.1.19.