THREAT OPS › Threat News › [GHSA] GHSA-mw8r-mw84-88v2 (high) — SiYuan: Publish-boundary bypass via WebSocket broadcast: anonymous readers receive a live unfiltered feed of all edits including protected/forbidden documents (publish mode)
[GHSA] GHSA-mw8r-mw84-88v2 (high) — SiYuan: Publish-boundary bypass via WebSocket broadcast: anonymous readers receive a live unfiltered feed of all edits including protected/forbidden documents (publish mode)
GHSA-mw8r-mw84-88v2 Severity: high CVE: CVE-2026-72810
SiYuan: Publish-boundary bypass via WebSocket broadcast: anonymous readers receive a live unfiltered feed of all edits including protected/forbidden documents (publish mode)
**CVE:** This vulnerability corresponds to CVE-2026-72810.
### Summary
WebSocket sessions established through the pu
Indicators of compromise
- CVE-2026-72810cve
Original source: https://github.com/advisories/GHSA-mw8r-mw84-88v2