{"api_version":"v1","generated_at":"2026-10-09T10:55:00+00:00","product":{"cve_count":210,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-siyuan-note-siyuan-3e34c3c0be74","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/siyuan","name":"siyuan","next_cursor":"djE6NTA","observations":[{"affected":"siyuan: < 3.8.5","affected_versions_present":true,"cve_id":"CVE-2026-105205","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-105205","fixed":"siyuan: 3.8.5","last_modified":"2026-10-05T13:30:12.526Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-v758-8w88-pfr2","primary_source":"","published":"2026-10-04T13:10:00.765Z"},{"affected":"siyuan: < 3.8.5","affected_versions_present":true,"cve_id":"CVE-2026-104410","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-104410","fixed":"siyuan: 3.8.5","last_modified":"2026-10-02T17:38:17.498Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-778g-gq49-fxxj","primary_source":"","published":"2026-10-02T11:37:54.829Z"},{"affected":"siyuan: < 3.8.5","affected_versions_present":true,"cve_id":"CVE-2026-103763","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-103763","fixed":"siyuan: 3.8.5","last_modified":"2026-10-02T15:50:33.523Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-ccxp-q3vg-jvgj","primary_source":"","published":"2026-10-02T11:37:54.162Z"},{"affected":"siyuan: < 3.8.5","affected_versions_present":true,"cve_id":"CVE-2026-103762","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-103762","fixed":"siyuan: 3.8.5","last_modified":"2026-10-06T02:33:19.013Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-2mrf-mx66-vv6g","primary_source":"","published":"2026-10-02T11:37:53.531Z"},{"affected":"siyuan: < 3.8.4","affected_versions_present":true,"cve_id":"CVE-2026-101092","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-101092","fixed":"siyuan: 3.8.4","last_modified":"2026-10-01T15:06:32.347Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-j9p6-5639-gf4f","primary_source":"","published":"2026-09-28T22:00:17.864Z"},{"affected":"siyuan: < 3.8.4","affected_versions_present":true,"cve_id":"CVE-2026-101091","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-101091","fixed":"siyuan: 3.8.4","last_modified":"2026-09-29T18:01:40.913Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-67p9-hm94-xwf3","primary_source":"","published":"2026-09-28T22:00:17.204Z"},{"affected":"siyuan: < 3.8.4","affected_versions_present":true,"cve_id":"CVE-2026-100646","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100646","fixed":"siyuan: 3.8.4","last_modified":"2026-09-30T14:47:14.800Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-2w6q-wgc8-q743","primary_source":"","published":"2026-09-26T13:23:17.483Z"},{"affected":"siyuan: 3.7.0 < 3.8.4","affected_versions_present":true,"cve_id":"CVE-2026-100645","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100645","fixed":"siyuan: 3.8.4","last_modified":"2026-10-08T15:51:27.580Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-556j-q8c8-qqg3","primary_source":"","published":"2026-09-26T13:23:16.770Z"},{"affected":"siyuan: < 3.8.4","affected_versions_present":true,"cve_id":"CVE-2026-100644","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100644","fixed":"siyuan: 3.8.4","last_modified":"2026-10-08T15:51:26.948Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-xr4h-j7cg-q8pc","primary_source":"","published":"2026-09-26T13:23:16.086Z"},{"affected":"siyuan: 2.10.8 < 3.8.4","affected_versions_present":true,"cve_id":"CVE-2026-100643","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100643","fixed":"siyuan: 3.8.4","last_modified":"2026-09-28T18:32:45.015Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-h3p6-c22r-fx2j","primary_source":"","published":"2026-09-26T13:23:15.365Z"},{"affected":"siyuan: 2.1.0 < 3.8.4","affected_versions_present":true,"cve_id":"CVE-2026-100642","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100642","fixed":"siyuan: 3.8.4","last_modified":"2026-09-30T14:45:54.559Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-9gpj-3rm3-x42m","primary_source":"","published":"2026-09-26T13:23:14.649Z"},{"affected":"siyuan: < 3.8.4","affected_versions_present":true,"cve_id":"CVE-2026-100641","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100641","fixed":"siyuan: 3.8.4","last_modified":"2026-10-05T15:58:59.286Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-2mmf-4xwm-55rm","primary_source":"","published":"2026-09-26T13:23:13.957Z"},{"affected":"siyuan: < 3.8.4","affected_versions_present":true,"cve_id":"CVE-2026-100640","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100640","fixed":"siyuan: 3.8.4","last_modified":"2026-10-08T15:21:52.521Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-mjmm-hgmc-m7qf","primary_source":"","published":"2026-09-26T13:23:13.287Z"},{"affected":"siyuan: < 3.8.4","affected_versions_present":true,"cve_id":"CVE-2026-100639","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100639","fixed":"siyuan: 3.8.4","last_modified":"2026-09-28T18:51:14.199Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-2cmm-9x9j-rvff","primary_source":"","published":"2026-09-26T13:23:12.602Z"},{"affected":"siyuan: < 3.8.4","affected_versions_present":true,"cve_id":"CVE-2026-100638","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100638","fixed":"siyuan: 3.8.4","last_modified":"2026-09-30T13:02:17.513Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-6h8x-6mph-7438","primary_source":"","published":"2026-09-26T13:23:11.930Z"},{"affected":"siyuan: < 3.8.4","affected_versions_present":true,"cve_id":"CVE-2026-100637","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100637","fixed":"siyuan: 3.8.4","last_modified":"2026-10-05T15:06:34.280Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-jhmh-hr4g-c5g2","primary_source":"","published":"2026-09-26T13:23:11.226Z"},{"affected":"siyuan: < 3.8.4","affected_versions_present":true,"cve_id":"CVE-2026-100636","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100636","fixed":"siyuan: 3.8.4","last_modified":"2026-09-28T16:50:54.968Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-jf98-m24w-gm9m","primary_source":"","published":"2026-09-26T13:23:10.528Z"},{"affected":"siyuan: < 3.8.4","affected_versions_present":true,"cve_id":"CVE-2026-100635","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100635","fixed":"siyuan: 3.8.4","last_modified":"2026-10-08T15:21:51.712Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-7j37-4gq6-wm7m","primary_source":"","published":"2026-09-26T13:23:09.854Z"},{"affected":"siyuan: < 3.8.4","affected_versions_present":true,"cve_id":"CVE-2026-100634","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100634","fixed":"siyuan: 3.8.4","last_modified":"2026-10-08T15:51:25.360Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-wxp7-xpq8-8xpm","primary_source":"","published":"2026-09-26T13:23:09.166Z"},{"affected":"siyuan: 3.8.0 < 3.8.4","affected_versions_present":true,"cve_id":"CVE-2026-100633","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100633","fixed":"siyuan: 3.8.4","last_modified":"2026-10-05T15:21:18.882Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-9g6v-r3xf-673q","primary_source":"","published":"2026-09-26T13:23:08.505Z"},{"affected":"siyuan: \u2264 3.8.4","affected_versions_present":true,"cve_id":"CVE-2026-93923","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-93923","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-21T15:39:08.068Z","patch_url":"","primary_source":"","published":"2026-09-18T23:12:09.139Z"},{"affected":"siyuan: \u2264 3.8.4","affected_versions_present":true,"cve_id":"CVE-2026-93922","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-93922","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-22T15:53:10.055Z","patch_url":"","primary_source":"","published":"2026-09-18T23:12:08.503Z"},{"affected":"siyuan: \u2264 3.8.4","affected_versions_present":true,"cve_id":"CVE-2026-93921","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-93921","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-21T14:10:37.585Z","patch_url":"","primary_source":"","published":"2026-09-18T23:12:07.789Z"},{"affected":"siyuan: < 3.8.3","affected_versions_present":true,"cve_id":"CVE-2026-93591","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-93591","fixed":"siyuan: 3.8.3","last_modified":"2026-09-18T19:55:54.946Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-5rwv-4j4c-f954","primary_source":"","published":"2026-09-18T13:20:04.684Z"},{"affected":"siyuan: < 3.8.4","affected_versions_present":true,"cve_id":"CVE-2026-92986","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-92986","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-17T19:20:06.691Z","patch_url":"","primary_source":"","published":"2026-09-17T14:22:10.251Z"},{"affected":"siyuan: < 3.8.4","affected_versions_present":true,"cve_id":"CVE-2026-92985","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-92985","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-17T15:23:20.675Z","patch_url":"","primary_source":"","published":"2026-09-17T14:22:09.581Z"},{"affected":"siyuan: < 3.8.2","affected_versions_present":true,"cve_id":"CVE-2026-87815","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-87815","fixed":"siyuan: 3.8.2","last_modified":"2026-09-14T13:08:07.201Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-94vh-rpgr-rpwc","primary_source":"","published":"2026-09-09T11:21:02.630Z"},{"affected":"siyuan: < 3.8.2","affected_versions_present":true,"cve_id":"CVE-2026-87814","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-87814","fixed":"siyuan: 3.8.2","last_modified":"2026-09-18T17:23:09.722Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-64gp-333q-mq6j","primary_source":"","published":"2026-09-09T11:21:01.964Z"},{"affected":"< 3.8.2","affected_versions_present":true,"cve_id":"CVE-2026-87813","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-87813","fixed":"3.8.2","last_modified":"2026-09-09T14:06:23.069Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-qcw6-qm34-28h8","primary_source":"","published":"2026-09-09T11:21:01.328Z"},{"affected":"< 3.8.2","affected_versions_present":true,"cve_id":"CVE-2026-87812","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-87812","fixed":"3.8.2","last_modified":"2026-09-10T14:58:39.488Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-rvcf-q4h8-w6c9","primary_source":"","published":"2026-09-09T11:21:00.494Z"},{"affected":"< 3.8.2","affected_versions_present":true,"cve_id":"CVE-2026-87811","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-87811","fixed":"3.8.2","last_modified":"2026-09-09T12:19:28.698Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-v6wf-r2gr-rrgf","primary_source":"","published":"2026-09-09T11:20:59.734Z"},{"affected":"siyuan: < 3.8.2","affected_versions_present":true,"cve_id":"CVE-2026-87810","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-87810","fixed":"siyuan: 3.8.2","last_modified":"2026-09-14T13:06:42.069Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-g45v-hxvm-wccj","primary_source":"","published":"2026-09-09T11:20:58.911Z"},{"affected":"siyuan: < 3.8.2","affected_versions_present":true,"cve_id":"CVE-2026-87809","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-87809","fixed":"siyuan: 3.8.2","last_modified":"2026-09-18T17:23:09.879Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-8wx4-fvqw-f5f8","primary_source":"","published":"2026-09-09T11:20:58.257Z"},{"affected":"< 3.8.2","affected_versions_present":true,"cve_id":"CVE-2026-87808","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-87808","fixed":"3.8.2","last_modified":"2026-09-09T14:05:19.500Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-4qwm-3p58-vh67","primary_source":"","published":"2026-09-09T11:20:57.576Z"},{"affected":"siyuan: < 3.8.2","affected_versions_present":true,"cve_id":"CVE-2026-87807","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-87807","fixed":"siyuan: 3.8.2","last_modified":"2026-10-08T15:51:49.895Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-336w-67gx-gx2h","primary_source":"","published":"2026-09-09T11:20:56.932Z"},{"affected":"< 3.8.2","affected_versions_present":true,"cve_id":"CVE-2026-86712","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-86712","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-10T15:03:19.971Z","patch_url":"","primary_source":"","published":"2026-09-08T11:23:05.131Z"},{"affected":"< 3.8.2","affected_versions_present":true,"cve_id":"CVE-2026-86192","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-86192","fixed":"3.8.2","last_modified":"2026-09-10T15:05:08.857Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-vc7j-5f5p-3x75","primary_source":"","published":"2026-09-05T12:09:06.781Z"},{"affected":"< 3.8.2","affected_versions_present":true,"cve_id":"CVE-2026-86191","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-86191","fixed":"3.8.2","last_modified":"2026-09-08T18:09:02.464Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-j4qq-w6qx-6839","primary_source":"","published":"2026-09-05T12:09:06.103Z"},{"affected":"< 3.8.2","affected_versions_present":true,"cve_id":"CVE-2026-85585","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-85585","fixed":"3.8.2","last_modified":"2026-09-04T16:03:39.767Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-p59v-3q54-qq55","primary_source":"","published":"2026-09-04T11:29:52.754Z"},{"affected":"< 3.8.2","affected_versions_present":true,"cve_id":"CVE-2026-85584","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-85584","fixed":"3.8.2","last_modified":"2026-09-08T14:43:47.001Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-2x7j-p79w-7744","primary_source":"","published":"2026-09-04T11:29:52.121Z"},{"affected":"siyuan: < 3.8.2","affected_versions_present":true,"cve_id":"CVE-2026-85583","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-85583","fixed":"siyuan: 3.8.2","last_modified":"2026-09-14T19:33:10.308Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-g7gf-v79m-jwrm","primary_source":"","published":"2026-09-04T11:29:51.462Z"},{"affected":"< 3.8.2","affected_versions_present":true,"cve_id":"CVE-2026-85582","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-85582","fixed":"3.8.2","last_modified":"2026-09-04T18:10:34.416Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-f4vj-ppp2-5hg4","primary_source":"","published":"2026-09-04T11:29:50.806Z"},{"affected":"< 3.8.2","affected_versions_present":true,"cve_id":"CVE-2026-85581","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-85581","fixed":"3.8.2","last_modified":"2026-09-10T15:09:54.880Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-wv96-wmf5-xvj2","primary_source":"","published":"2026-09-04T11:29:50.151Z"},{"affected":"< 3.8.2","affected_versions_present":true,"cve_id":"CVE-2026-85580","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-85580","fixed":"3.8.2","last_modified":"2026-09-04T14:07:28.189Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-mmgw-3mx9-cfwp","primary_source":"","published":"2026-09-04T11:29:49.503Z"},{"affected":"< 3.8.2","affected_versions_present":true,"cve_id":"CVE-2026-85579","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-85579","fixed":"3.8.2","last_modified":"2026-09-08T14:42:45.033Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-6gf8-q9ch-w732","primary_source":"","published":"2026-09-04T11:29:48.835Z"},{"affected":"siyuan: \u2264 3.8.1","affected_versions_present":true,"cve_id":"CVE-2026-85578","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-85578","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-10-08T15:51:47.056Z","patch_url":"","primary_source":"","published":"2026-09-04T11:29:48.193Z"},{"affected":"< 3.8.2","affected_versions_present":true,"cve_id":"CVE-2026-85175","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-85175","fixed":"3.8.2","last_modified":"2026-09-03T12:12:14.206Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-4wwp-f6gw-6qm5","primary_source":"","published":"2026-09-03T11:22:22.786Z"},{"affected":"< 3.8.2","affected_versions_present":true,"cve_id":"CVE-2026-85174","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-85174","fixed":"3.8.2","last_modified":"2026-09-05T01:18:25.477Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-3wvc-5754-gp67","primary_source":"","published":"2026-09-03T11:22:22.108Z"},{"affected":"< 3.8.2","affected_versions_present":true,"cve_id":"CVE-2026-84803","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-84803","fixed":"3.8.2","last_modified":"2026-09-02T13:54:45.797Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-7h8j-qw37-w46g","primary_source":"","published":"2026-09-02T11:11:17.006Z"},{"affected":"siyuan: < 3.8.1","affected_versions_present":true,"cve_id":"CVE-2026-82654","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-82654","fixed":"siyuan: 3.8.1","last_modified":"2026-09-01T14:07:50.048Z","patch_url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-hf87-qh3j-3p88","primary_source":"","published":"2026-08-30T14:33:35.156Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"siyuan-note"}}