What is GHSA-gw65-q899-j639?

GHSA-gw65-q899-j639 is a security advisory published by GitHub Security Advisories with High severity. SiYuan before v3.8.2 logs API tokens from query parameters in plaintext to an accessible log file...

Which CVE IDs does GHSA-gw65-q899-j639 cover?

GHSA-gw65-q899-j639 covers the following CVE IDs: CVE-2026-85174. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gw65-q899-j639?

GHSA-gw65-q899-j639 has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-gw65-q899-j639HighCVSS 8.8

SiYuan before v3.8.2 logs API tokens from query parameters in plaintext to an accessible log file...

Vendor

GitHub Security Advisories

Published

September 3, 2026

Last Modified

September 3, 2026

🔗 CVE IDs covered (1)

CVE-2026-85174 →

📋 Description

SiYuan before v3.8.2 logs API tokens from query parameters in plaintext to an accessible log file when full-text search requests exceed timing thresholds. Authenticated attackers can read the log file via the getFile endpoint to recover admin API tokens and gain permanent administrative access.

🔗 References (4)

https://github.com/siyuan-note/siyuan/security/advisories/GHSA-3wvc-5754-gp67
https://nvd.nist.gov/vuln/detail/CVE-2026-85174
https://www.vulncheck.com/advisories/siyuan-before-3.8.2-api-token-exposure-via-log-file
https://github.com/advisories/GHSA-gw65-q899-j639