CVE-2026-53578

Trilium (versions ≤ 0.103.0), an open-source hierarchical note-taking application, contains a vulnerability in its default-on Safe import filter. The filter sanitizes HTML only for text notes and excludes the mindMap note type, whose JSON content is stored unsanitized. A mind map node can carry a...

EUVD-2023-0736

Malicious code in bioql PyPI...

CVE-2021-32851

Mind-elixir is a free, open source mind map core. Prior to version 0.18.1, mind-elixir is prone to cross-site scripting when handling untrusted menus. This issue is patched in version 0.18.1...

suc_keditor (0.1.5) potentially affected by CVE-2021-32851 via mind-elixir (0.9.6)

mind-elixir NPM version 0.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on mind-elixir and may be impacted: - suckeditor 0.1.5 Source cves: CVE-2021-32851 Source advisory: OSV:GHSA-M22Q-97P5-79V2...

Mind-elixir Cross-site Scripting vulnerability

Mind-elixir is a free, open source mind map core. Prior to version 0.18.1, mind-elixir is prone to cross-site scripting when handling untrusted menus. This issue is patched in version 0.18.1...

GHSA-M22Q-97P5-79V2 Mind-elixir Cross-site Scripting vulnerability

Mind-elixir is a free, open source mind map core. Prior to version 0.18.1, mind-elixir is prone to cross-site scripting when handling untrusted menus. This issue is patched in version 0.18.1...

CVE-2021-32851

Mind-elixir is a free, open source mind map core. Prior to version 0.18.1, mind-elixir is prone to cross-site scripting when handling untrusted menus. This issue is patched in version 0.18.1...

CVE-2021-32851

Mind-elixir is a free, open source mind map core. Prior to version 0.18.1, mind-elixir is prone to cross-site scripting when handling untrusted menus. This issue is patched in version 0.18.1...

Cross site scripting

Mind-elixir is a free, open source mind map core. Prior to version 0.18.1, mind-elixir is prone to cross-site scripting when handling untrusted menus. This issue is patched in version 0.18.1...

CVE-2021-32851 jQuery MiniColors vulnerable to Cross-site Scripting

Mind-elixir is a free, open source mind map core. Prior to version 0.18.1, mind-elixir is prone to cross-site scripting when handling untrusted menus. This issue is patched in version 0.18.1...

CVE-2021-32851

Mind-elixir Cross-site Scripting vulnerability (CVE-2021-32851) affects Mind-elixir core prior to version 0.18.1, where untrusted menu handling can lead to XSS. The issue is fixed in 0.18.1. Affected scope includes Mind-elixir versions before 0.18.1; remediation is to upgrade to 0.18.1 or later. ...

Mind-elixir 跨站脚本漏洞

Mind-elixir is a framework-agnostic mind mapping core from the individual developers of ssshooter. A cross-site scripting vulnerability exists in versions of Mind-elixir prior to 0.18.1, which stems from a susceptibility to cross-site scripting when dealing with untrusted menus...

PT-2023-12183 · Unknown · Mind-Elixir

Name of the Vulnerable Software and Affected Versions: Mind-elixir versions prior to 0.18.1 Description: The issue is related to cross-site scripting when handling untrusted menus in Mind-elixir, a free, open source mind map core. Recommendations: For versions prior to 0.18.1, update to version...