Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 06:56:17 +0000 CVE-2026-72801 — SiYuan before v3.7.4 Information Disclosure via Encryption Key Material https://cve.radiocsirt.org/vuln/cve-2026-72801 <p><strong>Affected:</strong> siyuan-note siyuan</p> <p>SiYuan versions before v3.7.4 disclose encrypted-notebook key-derivation material and wrapped data keys through unauthenticated endpoints in publish mode. Attackers can retrieve Argon2id salt, cost parameters, password verifiers, and wrapped notebook keys to perform unlimited offline master-password cracking without rate limiting.</p> <p><strong>Affected:</strong> siyuan-note siyuan</p> <p>SiYuan versions before v3.7.4 disclose encrypted-notebook key-derivation material and wrapped data keys through unauthenticated endpoints in publish mode. Attackers can retrieve Argon2id salt, cost parameters, password verifiers, and wrapped notebook keys to perform unlimited offline master-password cracking without rate limiting.</p> https://cve.radiocsirt.org/vuln/cve-2026-72801