THREAT OPS › Threat News › [GHSA] GHSA-f2rw-w22v-54vh (medium) — SiYuan: getEncryptedNotebookStatus discloses names and current lock/unlock state of all encrypted notebooks to anonymous readers
[GHSA] GHSA-f2rw-w22v-54vh (medium) — SiYuan: getEncryptedNotebookStatus discloses names and current lock/unlock state of all encrypted notebooks to anonymous readers
GHSA-f2rw-w22v-54vh Severity: medium CVE: CVE-2026-72797
SiYuan: getEncryptedNotebookStatus discloses names and current lock/unlock state of all encrypted notebooks to anonymous readers
**CVE:** This vulnerability corresponds to CVE-2026-72797.
### Summary
`POST /api/notebook/getEncryptedNotebookStatus` returns the identifier, name, and curren
Indicators of compromise
- CVE-2026-72797cve
- http://127.0.0.1:6808/api/notebook/getEncryptedNotebookStatusurl
Original source: https://github.com/advisories/GHSA-f2rw-w22v-54vh