GitHub
At Universe, GitHub folds Copilot into Enterprise seats and lets Copilot Fusion pick the model.
Comparison · Collab
BookStack vs SiYuan
A side-by-side editorial comparison of BookStack and SiYuan — release velocity, themes, recent moves, and the top alternatives to consider.
BookStack vs SiYuan: at a glance
What is BookStack?
Five security releases in four months, this one closing an import RCE
BookStack's release stream since v26.05 has been almost entirely security patches. This release fixes a range of issues: attachments updatable without permission, XSS through the drawing endpoints, draft endpoints altering non-draft pages, other users' drafts leaking into search results, remote code execution through crafted ZIP imports, and page visibility not updating in recycle-bin scenarios. The feature release it patches, v26.05, added a page contents view, tag API and separately controlled revision permissions.
What is SiYuan?
SiYuan 3.8.9 reaches RC, adding AI-agent extraction of images embedded in PDFs.
SiYuan moved 3.8.9 from beta.6 to rc.1 on Oct 28. The RC's only new item is AI-agent extraction of images embedded in PDFs; the rest of its long list matches beta.5's cumulative notes: pinned agent sessions, backlink filtering by database fields, block-reference collection through database automation, resizable table rows, mind-map themes and node copy/paste, TIFF previews and macOS proxy detection.
BookStack vs SiYuan: editorial side-by-side
BookStack
5.0COLLAB
Five security releases in four months, this one closing an import RCE
◆ Current state
BookStack's release stream since v26.05 has been almost entirely security patches. This release fixes a range of issues: attachments updatable without permission, XSS through the drawing endpoints, draft endpoints altering non-draft pages, other users' drafts leaking into search results, remote code execution through crafted ZIP imports, and page visibility not updating in recycle-bin scenarios. The feature release it patches, v26.05, added a page contents view, tag API and separately controlled revision permissions.
◆ Where it's heading
The pattern is a substantial feature release followed by a run of point releases that are purely security, each crediting outside reporters. That cadence suggests sustained external scrutiny of the permission and import paths rather than a project shipping features in small increments. Every advisory in this run touches either permission checking or content handling on import and export — the two places where a self-hosted wiki with untrusted editors is most exposed.
◆ Prediction
Nothing in this stream points to the next feature release; on the current pattern the next tag is more likely to be another point release closing reported issues in the same permission and import surfaces.
SiYuan
5.0COLLAB
SiYuan 3.8.9 reaches RC, adding AI-agent extraction of images embedded in PDFs.
◆ Current state
SiYuan moved 3.8.9 from beta.6 to rc.1 on Oct 28. The RC's only new item is AI-agent extraction of images embedded in PDFs; the rest of its long list matches beta.5's cumulative notes: pinned agent sessions, backlink filtering by database fields, block-reference collection through database automation, resizable table rows, mind-map themes and node copy/paste, TIFF previews and macOS proxy detection.
◆ Where it's heading
The 3.8.x line keeps turning databases and mind maps into structured tools that act on the block graph, and the built-in agent is gaining reach into document content such as PDFs. The release cadence is fast and noisy, with most builds repeating the same cumulative notes.
◆ Prediction
A stable 3.8.9 is likely within days, with little added beyond fixes now that it has reached RC.
Alternatives to BookStack and SiYuan
Other Collab products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either BookStack or SiYuan.
KACE
KACE extends its PHP2SHELL fix to the SDA deployment appliance, six days after disclosure.
Mattermost
Mattermost v12 puts user-scoped permissions, private models and audit trails on every agent action.
AFFiNE
AFFiNE's canaries stay on upkeep: a Swift Collections bump follows CVE and migration fixes.
Teable
Teable's Structured Query v2 now reports across multi-hop relations, with a strict mode against SQL.
Readwise
Readwise splits its bundle into Reader-only and Highlights-only plans and renames its first app.
See all BookStack alternatives → · See all SiYuan alternatives →
Recent activity from BookStack and SiYuan
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 1d agoSiYuanSiYuan 3.8.9 RC1: AI agent extracts images from PDFs
- 1d agoSiYuanSiYuan 3.8.9 beta 6 (same notes as beta 5)
- 1d agoSiYuanSiYuan 3.8.9 beta 5: full notes incl. pinned agent sessions
- 2d agoSiYuanSiYuan 3.8.9 beta 4 improves LaTeX paste and import
- 2d agoSiYuanSiYuan 3.8.9 beta 3 (same notes as beta 1)
- 2d agoSiYuanSiYuan 3.8.9 beta 2 (same notes as beta 1)
- 2mo agoBookStackSecurity release closes a ZIP-import RCE and permission bypasses
- 3mo agoBookStackSecurity release fixes five issues including auth matching
- 3mo agoBookStackURL filtering, redirects and permission checks hardened
- 4mo agoBookStackAttachment metadata leak and file:// export risk closed
- 5mo agoBookStackv26.05 adds page contents view, tag API and revision permissions
- 5mo agoBookStackRate limiting added to MFA verification routes
Frequently asked questions
What is the difference between BookStack and SiYuan?
They serve adjacent needs but don't currently overlap on shipped themes. BookStack and SiYuan are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is BookStack better than SiYuan?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. BookStack and SiYuan are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Collab products to evaluate alongside.
What are the best alternatives to BookStack?
Top BookStack alternatives in Collab are ranked by recent ship velocity. Browse the "BookStack alternatives" section above for the current picks, or visit /alternatives/bookstack for the full list with editorial commentary on each.
What are the best alternatives to SiYuan?
Top SiYuan alternatives in Collab are ranked by recent ship velocity. Browse the "SiYuan alternatives" section above for the current picks, or visit /alternatives/siyuan for the full list with editorial commentary on each.