What is GHSA-9r2h-ghj5-r7hq?

GHSA-9r2h-ghj5-r7hq is a security advisory published by GitHub Security Advisories with High severity. siyuan versions before v3.8.2 contain an authenticated SQL injection vulnerability in the...

Which CVE IDs does GHSA-9r2h-ghj5-r7hq cover?

GHSA-9r2h-ghj5-r7hq covers the following CVE IDs: CVE-2026-87807. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9r2h-ghj5-r7hq?

GHSA-9r2h-ghj5-r7hq has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-9r2h-ghj5-r7hqHighCVSS 7.5

siyuan versions before v3.8.2 contain an authenticated SQL injection vulnerability in the...

Vendor

GitHub Security Advisories

Published

September 9, 2026

Last Modified

September 9, 2026

🔗 CVE IDs covered (1)

CVE-2026-87807 →

📋 Description

siyuan versions before v3.8.2 contain an authenticated SQL injection vulnerability in the fullTextSearchBlock endpoint's method=1 query parameter. Attackers can inject UNION SELECT statements to read the entire blocks table, bypassing publish-access controls and exposing all document content and sensitive attributes.

🔗 References (4)

https://github.com/siyuan-note/siyuan/security/advisories/GHSA-336w-67gx-gx2h
https://nvd.nist.gov/vuln/detail/CVE-2026-87807
https://www.vulncheck.com/advisories/siyuan-before-3.8.2-sql-injection-via-fulltextsearchblock
https://github.com/advisories/GHSA-9r2h-ghj5-r7hq