UNKNOWN Go
SiYuan: Notebook name, document count, size and timestamps are returned for any notebook, including notebooks hidden from readers, by /api/notebook/getNotebookInfo in github.com/siyuan-note/siyuan/kernel
GO-2026-6431 · CVE-2026-72790 · GHSA-74pj-6g7r-j55c
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
SiYuan: Notebook name, document count, size and timestamps are returned for any notebook, including notebooks hidden from readers, by /api/notebook/getNotebookInfo in github.com/siyuan-note/siyuan/kernel
References
- ADVISORY https://github.com/siyuan-note/siyuan/security/advisories/GHSA-74pj-6g7r-j55c
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2026-72790
- WEB https://github.com/siyuan-note/siyuan/commit/9edb321eb451db445f3c824380e1993c3df0fc16
- WEB https://www.vulncheck.com/advisories/siyuan-before-information-disclosure-via-getnotebookinfo
Ready to move
Start Securing
Free, no credit card | First findings in minutes