{"id":"EUVD-2026-42742","revision":"2fe7271dbf1b41daa36ab78dffe4d693","records":[{"revision":"2fe7271dbf1b41daa36ab78dffe4d693","observedAt":"2026-11-01T11:24:24.607+00:00","statement":{"source":"euvd","id":"EUVD-2026-42742","aliases":["CVE-2026-59834","GHSA-h89q-4j2h-7h88"],"title":"SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, the block search endpoint POST /api/search/fullTextSearchBlock concatenates attacker-controlled paths values into SQL predicates used by non-SQL search modes, al…","description":"SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, the block search endpoint POST /api/search/fullTextSearchBlock concatenates attacker-controlled paths values into SQL predicates used by non-SQL search modes, allowing an unauthenticated publish visitor to inject a UNION SELECT and return rows from hidden documents by projecting an allowed visible box and path. This issue is fixed in versions 3.7.1.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","score":7.5,"severity":null}],"references":["https://github.com/siyuan-note/siyuan/security/advisories/GHSA-h89q-4j2h-7h88","https://github.com/siyuan-note/siyuan/commit/57bcad4b331836880bfe6be25d4180bdcf10db0d","https://github.com/siyuan-note/siyuan/commit/d0f0fe146fb07d594fcadc4f48d4f7c30ac01d1e","https://github.com/siyuan-note/siyuan/releases/tag/v3.7.1"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42742","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Jul 9, 2026, 10:15:48 PM","dateUpdated":"Jul 10, 2026, 1:33:27 PM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-42742","identifiers":["EUVD-2026-42742","CVE-2026-59834","GHSA-h89q-4j2h-7h88"]},"retained":false,"historicalAffected":[]}],"coverage":[]}