CVE-2026-103763
MEDIUM
NVD
CVSS Score
5.8
Severity
MEDIUM
Published
Oct 02, 2026
Vendor
unknown
Description
SiYuan before v3.8.5 contains an information disclosure vulnerability that allows read-only publish readers to learn metadata of publish-excluded documents through the getNotebookInfo endpoint. Attackers, including anonymous visitors when no reader password is set, can query publish-visible notebooks to obtain document count, size and modification timestamps of hidden documents.