01 Record

CVE-2026-62204

SiYuan before v3.7.4 Plugin Overwrite via Bazaar Install

MediumPUBLISHEDCNA: VulnCheck

Base score5.9 CVSS v4.0CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L

02 Description

SiYuan before v3.7.4 Plugin Overwrite via Bazaar Install

Published

2026-08-22 12:26Z2 HR AGO

Last updated

2026-08-22 12:26Z2 HR AGO

Reserved

2026-07-13

Assigning CNA

VulnCheck

Record state

PUBLISHED

Severity

Medium (CVSS 5.9)

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L

Weaknesses

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

a18e4ee772246dadeeb0f97ed248416b0064bbef7129fec1620c0f89c81c6c95

VendorProductVersionsPlatforms

siyuan-notesiyuan0 to < 3.7.4—

github.comGitHub Security Advisory (GHSA-rpx2-p6hp-x5gj)https://github.com/siyuan-note/siyuan/security/advisories/GHSA-rpx2-p6hp-x5gjvendor-advisory
www.vulncheck.comVulnCheck Advisory: SiYuan before v3.7.4 Plugin Overwrite via Bazaar Installhttps://www.vulncheck.com/advisories/siyuan-before-plugin-overwrite-via-bazaar-installthird-party-advisory