THREAT OPS › Threat News › [GHSA] GHSA-74pj-6g7r-j55c (medium) — SiYuan: Notebook name, document count, size and timestamps are returned for any notebook, including notebooks hidden from readers, by /api/notebook/getNotebookInfo
[GHSA] GHSA-74pj-6g7r-j55c (medium) — SiYuan: Notebook name, document count, size and timestamps are returned for any notebook, including notebooks hidden from readers, by /api/notebook/getNotebookInfo
GHSA-74pj-6g7r-j55c Severity: medium CVE: CVE-2026-72790
SiYuan: Notebook name, document count, size and timestamps are returned for any notebook, including notebooks hidden from readers, by /api/notebook/getNotebookInfo
**CVE:** This vulnerability corresponds to CVE-2026-72790.
### Relationship to GHSA-8x84-r2ff-h8pq (please read first)
`getN
Indicators of compromise
- CVE-2026-72790cve
- http://127.0.0.1:6808/api/block/getBlockDefIDsByRefTexturl
- http://127.0.0.1:6808/api/filetree/getPathByIDurl
- http://127.0.0.1:6808/api/notebook/getNotebookInfourl
Original source: https://github.com/advisories/GHSA-74pj-6g7r-j55c