•about 20 hours ago•CVE-2026-75856
9.2CVE-2026-75856: Server-Side Request Forgery (SSRF) Bypass via DNS Resolution TOCTOU in CodeWhale
A critical Server-Side Request Forgery (SSRF) bypass vulnerability exists in CodeWhale before version 0.8.64 (and version 0.8.41 in the 0.8.x branch) due to a Time-of-Check to Time-of-Use (TOCTOU) bug in its DNS pre-flight validation mechanism. By returning a temporary resolution failure during validation and subsequently resolving to restricted IPs during HTTP execution, attackers can bypass security rules.
5 views•6 min read
•about 21 hours ago•CVE-2026-75912
8.3CVE-2026-75912: Argument Injection and Arbitrary File Disclosure in CodeWhale Git Tools
An argument injection vulnerability in CodeWhale (CVE-2026-75912 / GHSA-c6mw-8xh8-gpq6) allows unauthenticated remote attackers to execute arbitrary option commands on the git binary. By passing malicious command-line flags inside git_blame and git_show tool helper functions, an attacker can bypass typical access controls to read arbitrary local system files via the underlying git process.
8 views•5 min read
•about 22 hours ago•CVE-2026-63735
8.6CVE-2026-63735: Cross-Tenant Authorization Bypass in SurrealDB Custom API Routing Handler
SurrealDB prior to version 3.2.0 is vulnerable to an authorization bypass where authenticated users can invoke custom API endpoints belonging to other tenants. This cross-tenant data access occurs because the system fails to validate authorization scope boundaries against request-supplied namespace and database identifiers before executing scripts with elevated definer's rights.
7 views•6 min read
•about 23 hours ago•CVE-2026-63733
4.3CVE-2026-63733: Incorrect Authorization in SurrealDB Permissions Clause
An incorrect authorization vulnerability (CWE-863) in SurrealDB allows authenticated, low-privileged users to execute unauthorized state-modifying queries. This occurs because the database disabled permissions during evaluation of custom PERMISSIONS WHERE predicates to prevent infinite recursion.
5 views•7 min read
•about 24 hours ago•CVE-2026-72799
6.9CVE-2026-72799: Missing Authorization in SiYuan Filetree Path-Resolution API
SiYuan before v3.7.4 fails to enforce publish-access filters on five filetree path-resolution endpoints, allowing unauthenticated attackers to reconstruct private directory layouts and map document structures.
6 views•7 min read
•1 day ago•CVE-2026-72798
9.2CVE-2026-72798: Missing Authorization and Information Disclosure in SiYuan renderAttributeView
Prior to version v3.7.4, the SiYuan personal knowledge management system contained a critical logical authorization vulnerability within its database view rendering component. The flaws allowed unauthenticated remote attackers to bypass publish-access filters on databases, exposing sensitive Relation and Rollup cell contents belonging to private or password-protected repositories.
6 views•5 min read
•1 day ago•CVE-2026-72797
6.9CVE-2026-72797: Missing Authorization in SiYuan Notebook Metadata Endpoint
An information disclosure vulnerability exists in SiYuan prior to v3.7.4 due to missing authorization checks on the getEncryptedNotebookStatus API endpoint, allowing unprivileged or anonymous users to enumerate protected notebooks.
8 views•6 min read
•1 day ago•CVE-2026-72794
8.6CVE-2026-72794: Cryptographic Key Leakage and Session Forgery in SiYuan
An information disclosure vulnerability in the SiYuan application exposes the global session cookie signing key via the `/api/system/getConf` endpoint. This allows unauthenticated remote attackers or low-privileged users to forge administrative session cookies and gain unauthorized access to the application kernel.
8 views•6 min read
•1 day ago•CVE-2026-72795
9.2CVE-2026-72795: Missing Authorization in SiYuan Block DOM Rendering
CVE-2026-72795 is a critical missing authorization vulnerability (CWE-862) in SiYuan, a self-hosted personal knowledge platform. When configured in publish/read-only mode, the application fails to validate publish-access rules on dynamic child blocks transcluded via SQL queries. This allows anonymous external visitors to access hidden, password-protected, or forbidden note content.
6 views•5 min read
•1 day ago•CVE-2026-72793
8.6CVE-2026-72793: Information Disclosure and Session Forgery in SiYuan Note-Taking Application
A critical information disclosure vulnerability in the SiYuan note-taking application allows remote attackers to retrieve sensitive configurations, including cryptographic session-cookie signing keys and absolute host system directories, leading to administrative session hijacking.
7 views•6 min read
•1 day ago•CVE-2026-72792
6.9CVE-2026-72792: Information Disclosure via Tag API Endpoint in SiYuan
SiYuan before version v3.7.4 is affected by an information disclosure vulnerability in the `/api/tag/getTag` endpoint. Under publish mode, this endpoint returns tag labels and occurrence counts from password-protected documents to unauthenticated readers, allowing them to enumerate protected vocabulary and internal metadata without providing the document's publish password.
8 views•5 min read
•1 day ago•CVE-2026-71486
4.3CVE-2026-71486: Uncontrolled Resource Consumption in vLLM Derender Endpoints
CVE-2026-71486 (GHSA-8737-qx52-hjff) is an uncontrolled resource consumption vulnerability in vLLM's derender endpoints before version 0.26.0. An authenticated attacker can supply crafted, deeply nested token structures to exhaust CPU and memory resources, resulting in server denial of service (DoS) or Out of Memory (OOM) crashes. This vulnerability stems from missing input-bounds validation before passing user-supplied structures to computationally intensive decoding routines.
6 views•6 min read