b3log vulnerabilities

Recent CVEs affecting b3log products. 6 tracked.

b3log has 6 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 6. Most recent: 2026-04-17. Highest priority: CVE-2026-39846 (score 48/100).

• CVE-2026-39846 CRITICAL 9.0 UPGRADE SiYuan is a personal knowledge management system
• CVE-2026-40922 MEDIUM 5.4 UPGRADE SiYuan is an open-source personal knowledge management system
• CVE-2026-40322 CRITICAL 9.0 UPGRADE SiYuan is an open-source personal knowledge management system
• CVE-2026-40318 HIGH 8.5 UPGRADE SiYuan is an open-source personal knowledge management system
• CVE-2026-40259 HIGH 8.1 UPGRADE SiYuan is an open-source personal knowledge management system
• CVE-2026-40107 MEDIUM 6.5 UPGRADE SiYuan is a personal knowledge management system

FAQ

How do I fix b3log vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is b3log being exploited right now?

None of the tracked b3log CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which b3log CVE should I patch first?

CVE-2026-39846 currently ranks highest (48/100): SiYuan is a personal knowledge management system.

Products

• siyuan

RSS feed for b3log · ← Back to latest CVEs