{"id":"GO-2026-6388","revision":"8681adb579094fc7894a63da6f828ba3","records":[{"revision":"8681adb579094fc7894a63da6f828ba3","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-6388","aliases":["CVE-2026-72806","GHSA-6mcf-g667-w3qv"],"title":"SiYuan: Password (protected) tier omitted in the attribute-view/database publish filter: Reader receives rows of protected documents without the password (publish mode) in github.com/siyuan-note/siyuan/kernel","description":"SiYuan: Password (protected) tier omitted in the attribute-view/database publish filter: Reader receives rows of protected documents without the password (publish mode) in github.com/siyuan-note/siyuan/kernel","state":0,"publishedAt":"2026-09-10T14:48:42+00:00","modifiedAt":"2026-09-10T15:15:14.4019329+00:00","affected":[{"ecosystem":"Go","name":"github.com/siyuan-note/siyuan/kernel","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.0.0-20260723040913-768427f20f13"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/siyuan-note/siyuan/security/advisories/GHSA-6mcf-g667-w3qv","https://nvd.nist.gov/vuln/detail/CVE-2026-72806","https://github.com/siyuan-note/siyuan/commit/768427f20f13bbd8dc4effa8aa4e1d09a7741bf4","https://www.vulncheck.com/advisories/siyuan-before-authentication-bypass-via-attribute-view"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6388","license":"OSV · upstream source license applies","key":"osv:GO-2026-6388","identifiers":["GO-2026-6388","CVE-2026-72806","GHSA-6mcf-g667-w3qv"]},"retained":false,"historicalAffected":[]}],"coverage":[]}