L1Nuxkid

**Name of the Vulnerable Software and Affected Versions** SiYuan versions prior to 3.7.4 **Description** A cross-site request forgery issue exists in the session-cookie authentication branch of the `CheckAuth()` function. The system fails to perform Origin or Referer validation and does not set an explicit SameSite attribute on session cookies. This allows attackers to create malicious web pages that execute unauthorized actions on behalf of authenticated users by submitting requests with valid session cookies, exploiting the reliance on default browser SameSite policies instead of server-side protections. **Recommendations** Update to version 3.7.4 or later.

**Name of the Vulnerable Software and Affected Versions** SiYuan versions prior to 3.7.4 **Description** The Publish Service Basic Auth implementation contains a flaw that allows unthrottled brute-force attacks. The service operates on a separate listener, typically TCP port 6808, which is unauthenticated by default. It uses Basic Auth to protect `Conf.Publish.Auth.Accounts` (publish-viewer accounts) but lacks rate limiting, per-account lockout, or backoff mechanisms. This allows unauthenticated remote attackers to perform unlimited password guesses against these accounts to gain unauthorized access to published notes and notebooks via the `PublishServiceTransport.RoundTrip()` function. **Recommendations** Update to version 3.7.4 or later.