Trilium
by Zadam
Source repositories
CVEs (5)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-43745 | Med | 0.36 | 5.5 | 0.00 | Feb 24, 2022 | A Denial of Service vulnerabilty exists in Trilium Notes 0.48.6 in the setupPage function | ||
| CVE-2026-91021 | Med | 0.35 | 5.4 | 0.00 | Sep 14, 2026 | Trilium Notes, version v0.103.0 and earlier, contains a stored cross-site scripting (XSS) vulnerability in the share renderer for webView notes due to improper HTML escaping of user-controlled #webViewSrc values. This vulnerability allows attackers with note-authoring privileges… | ||
| CVE-2023-3067 | Med | 0.00 | 5.4 | 0.00 | Jun 2, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository zadam/trilium prior to 0.59.4. | ||
| CVE-2022-2365 | Med | 0.00 | 5.4 | 0.00 | Jul 10, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository zadam/trilium prior to 0.53.3. | ||
| CVE-2022-2290 | Med | 0.00 | 6.1 | 0.03 | Jul 3, 2022 | Cross-site Scripting (XSS) - Reflected in GitHub repository zadam/trilium prior to 0.52.4, 0.53.1-beta. |
- risk 0.36cvss 5.5epss 0.00
A Denial of Service vulnerabilty exists in Trilium Notes 0.48.6 in the setupPage function
- risk 0.35cvss 5.4epss 0.00
Trilium Notes, version v0.103.0 and earlier, contains a stored cross-site scripting (XSS) vulnerability in the share renderer for webView notes due to improper HTML escaping of user-controlled #webViewSrc values. This vulnerability allows attackers with note-authoring privileges…
- risk 0.00cvss 5.4epss 0.00
Cross-site Scripting (XSS) - Stored in GitHub repository zadam/trilium prior to 0.59.4.
- risk 0.00cvss 5.4epss 0.00
Cross-site Scripting (XSS) - Stored in GitHub repository zadam/trilium prior to 0.53.3.
- risk 0.00cvss 6.1epss 0.03
Cross-site Scripting (XSS) - Reflected in GitHub repository zadam/trilium prior to 0.52.4, 0.53.1-beta.