CVE-2026-103763

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.5

Description An information disclosure issue exists where read-only publish readers can access metadata of documents that have been excluded from publishing. By querying the 'getNotebookInfo' endpoint, attackers—including anonymous visitors if no reader password is configured—can retrieve the document count, size, and modification timestamps of these hidden documents.

Recommendations Update to version 3.8.5 or later.