Kodem's Vulnerability Database

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-72797Mediumgithub.com/siyuan-note/siyuan/kernel: SiYuan: getEncryptedNotebookStatus discloses names and current lock/unlock state of all encrypted notebooks to anonymous readersCVE-2026-72798Highgithub.com/siyuan-note/siyuan/kernel: SiYuan: Publish-access filter on renderAttributeView leaves related-database content unfiltered and fails open on non-block first columnsCVE-2026-72799Mediumgithub.com/siyuan-note/siyuan/kernel: SiYuan: Missing publish-access filter on the HPath/path-resolution endpoints discloses the private document tree to anonymous readersCVE-2026-63733Mediumsurrealdb-core: SurrealDB: Writes in a PERMISSIONS clause bypass table permissionsCVE-2026-63735Highsurrealdb: SurrealDB: Custom API route lets authenticated callers override namespace/database scope via URL pathCVE-2026-75911Highdeepseek-tui: CodeWhale: Project config `allow_shell` override enables arbitrary shell command execution via cloned repositoryCVE-2026-75858Highdeepseek-tui: CodeWhale: rlm_eval auto-approves arbitrary Python execution, bypassing the user's approval policy (RCE)CVE-2026-75912Highdeepseek-tui: CodeWhale: Argument Injection in `git_blame` Tool Allows Arbitrary File Read Without ApprovalCVE-2026-75856Criticaldeepseek-tui: CodeWhale: SSRF‌ bypass - TOCTOU on DNS failure for DNS pinningCVE-2026-75915Highdeepseek-tui: CodeWhale: js_execution leaks parent environment to model context via missing env scrubCVE-2026-75913Highdeepseek-tui: CodeWhale: Argument Injection in `git_show` Tool Allows Arbitrary File Write Without ApprovalCVE-2026-75857Highdeepseek-tui: CodeWhale: exec_shell_interact sends LLM-controlled input to a running shell without an approval prompt (privilege escalation)CVE-2026-75859Highdeepseek-tui: CodeWhale: Project config `instructions` override enables arbitrary file read into AI system prompt via cloned repositoryCVE-2026-75914Highdeepseek-tui: CodeWhale: image_analyze follows workspace symlinks, leaking external file bytesGHSA-6HXQ-P678-4HR2Low@simplewebauthn/server: SimpleWebAuthn: Registration verification does not sufficiently ensure that attestation certificates chain to a trust anchorCVE-2025-71390MediumSurrealDB: SurrealDB allows bypass of deny-net flags via DNS resolutionCVE-2026-72800Mediumgithub.com/siyuan-note/siyuan/kernel: SiYuan: Missing publish-access filter on getAttributeViewKeysByID discloses database column schema, plus two unscoped block-ID enumeration…CVE-2026-72801Highgithub.com/siyuan-note/siyuan/kernel: SiYuan: Encrypted-notebook key-derivation material and wrapped notebook keys disclosed to anonymous readers, enabling offline…CVE-2026-72802Mediumgithub.com/siyuan-note/siyuan/kernel: SiYuan: Absolute filesystem path and OS username disclosure via resolveAssetPathCVE-2026-72803Mediumgithub.com/siyuan-note/siyuan/kernel: SiYuan: Missing publish-access filter on getBlockAttrs and batchGetBlockAttrs discloses block attributes (name, alias, memo, custom fields)…CVE-2026-72804Highgithub.com/siyuan-note/siyuan/kernel: SiYuan: Graph endpoints omit the publish-password tier: anonymous readers receive block-level content of password-protected documentsCVE-2026-72805Mediumgithub.com/siyuan-note/siyuan/kernel: SiYuan: Missing publish-access check on getBlockBreadcrumb, getRefText, and getBlockTreeInfos discloses content and metadata of…CVE-2026-72806Mediumgithub.com/siyuan-note/siyuan/kernel: SiYuan: Password (protected) tier omitted in the attribute-view/database publish filter: Reader receives rows of protected documents…CVE-2026-72807Highgithub.com/siyuan-note/siyuan/kernel: SiYuan: Second-order SSTI to arbitrary SQL via attribute-view template column (queryBlocks): malicious imported package executes SQL on…CVE-2026-72808Mediumgithub.com/siyuan-note/siyuan/kernel: SiYuan: Missing publish-access filter on getFileAnnotation discloses private PDF annotations of forbidden/protected documents (publish mode)

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo