•about 1 hour ago•CVE-2026-72798
9.2CVE-2026-72798: Missing Authorization and Information Disclosure in SiYuan renderAttributeView
Prior to version v3.7.4, the SiYuan personal knowledge management system contained a critical logical authorization vulnerability within its database view rendering component. The flaws allowed unauthenticated remote attackers to bypass publish-access filters on databases, exposing sensitive Relation and Rollup cell contents belonging to private or password-protected repositories.
0 views•5 min read
•about 2 hours ago•CVE-2026-72797
6.9CVE-2026-72797: Missing Authorization in SiYuan Notebook Metadata Endpoint
An information disclosure vulnerability exists in SiYuan prior to v3.7.4 due to missing authorization checks on the getEncryptedNotebookStatus API endpoint, allowing unprivileged or anonymous users to enumerate protected notebooks.
1 views•6 min read
•about 3 hours ago•CVE-2026-72794
8.6CVE-2026-72794: Cryptographic Key Leakage and Session Forgery in SiYuan
An information disclosure vulnerability in the SiYuan application exposes the global session cookie signing key via the `/api/system/getConf` endpoint. This allows unauthenticated remote attackers or low-privileged users to forge administrative session cookies and gain unauthorized access to the application kernel.
5 views•6 min read
•about 4 hours ago•CVE-2026-72795
9.2CVE-2026-72795: Missing Authorization in SiYuan Block DOM Rendering
CVE-2026-72795 is a critical missing authorization vulnerability (CWE-862) in SiYuan, a self-hosted personal knowledge platform. When configured in publish/read-only mode, the application fails to validate publish-access rules on dynamic child blocks transcluded via SQL queries. This allows anonymous external visitors to access hidden, password-protected, or forbidden note content.
3 views•5 min read
•about 5 hours ago•CVE-2026-72793
8.6CVE-2026-72793: Information Disclosure and Session Forgery in SiYuan Note-Taking Application
A critical information disclosure vulnerability in the SiYuan note-taking application allows remote attackers to retrieve sensitive configurations, including cryptographic session-cookie signing keys and absolute host system directories, leading to administrative session hijacking.
5 views•6 min read
•about 6 hours ago•CVE-2026-72792
6.9CVE-2026-72792: Information Disclosure via Tag API Endpoint in SiYuan
SiYuan before version v3.7.4 is affected by an information disclosure vulnerability in the `/api/tag/getTag` endpoint. Under publish mode, this endpoint returns tag labels and occurrence counts from password-protected documents to unauthenticated readers, allowing them to enumerate protected vocabulary and internal metadata without providing the document's publish password.
4 views•5 min read
•about 7 hours ago•CVE-2026-71486
4.3CVE-2026-71486: Uncontrolled Resource Consumption in vLLM Derender Endpoints
CVE-2026-71486 (GHSA-8737-qx52-hjff) is an uncontrolled resource consumption vulnerability in vLLM's derender endpoints before version 0.26.0. An authenticated attacker can supply crafted, deeply nested token structures to exhaust CPU and memory resources, resulting in server denial of service (DoS) or Out of Memory (OOM) crashes. This vulnerability stems from missing input-bounds validation before passing user-supplied structures to computationally intensive decoding routines.
3 views•6 min read
•about 8 hours ago•CVE-2026-73555
5.3CVE-2026-73555: Environment and Information Disclosure via Exception Handling in vLLM
An information disclosure vulnerability in vLLM prior to version 0.26.0 allows unauthenticated remote attackers to trigger validation errors that expose highly sensitive host machine metadata, absolute paths, environment structures, and usernames. This flaw stems from improper serialization of Pydantic exceptions and an inadequate fallback sanitization function.
4 views•5 min read
•about 9 hours ago•CVE-2026-73556
5.3CVE-2026-73556: Regular Expression Denial of Service (ReDoS) in vLLM lm-format-enforcer Backend
CVE-2026-73556 is a Regular Expression Denial of Service (ReDoS) vulnerability in the vLLM inference engine's lm-format-enforcer structured-output backend. Prior to version 0.26.0, lack of compilation timeouts or complexity validation for user-supplied regular expressions in the structured_outputs.regex parameter allowed unauthenticated remote attackers to trigger CPU exhaustion and block the core execution loop.
3 views•5 min read
•about 10 hours ago•CVE-2026-73557
6.3CVE-2026-73557: Race Condition in PyTorch Tensor Invariant Checks within vLLM Engine
CVE-2026-73557 details a race condition vulnerability in the vLLM serving framework, arising from the thread-unsafe usage of PyTorch's process-global sparse tensor invariant check manager. When processing concurrent requests with custom prompt or multimodal embeddings, concurrent thread execution can disable global tensor integrity checks. An unauthenticated attacker can leverage this timing window to submit malformed sparse coordinate (COO) tensors containing out-of-bounds indices, causing memory corruption and process crashes (Denial of Service).
4 views•5 min read
•about 11 hours ago•CVE-2026-73842
9.0CVE-2026-73842: Missing Authentication and Authorization on Internal Management Listener in OpenChoreo cluster-gateway
A critical-severity missing authentication and privilege management vulnerability was identified in the OpenChoreo cluster-gateway component. The gateway exposed internal management endpoints, including arbitrary Kubernetes proxying and execution interfaces, on an unauthenticated port. An adjacent attacker within the control-plane network can bypass RBAC controls entirely and gain administrative control over all connected data planes.
5 views•6 min read
•about 12 hours ago•GHSA-7Q9C-HPX7-9CWM
7.5GHSA-7Q9C-HPX7-9CWM: Unauthenticated Remote Shutdown in @typespec/spector Mock Server
An unauthenticated remote shutdown vulnerability exists in the Microsoft TypeSpec Spector mock server. Due to missing authentication on critical administrative routes and binding to all network interfaces, any remote attacker can shut down the mock server.
3 views•7 min read