CVE-2026-53578

Trilium (versions ≤ 0.103.0), an open-source hierarchical note-taking application, contains a vulnerability in its default-on Safe import filter. The filter sanitizes HTML only for text notes and excludes the mindMap note type, whose JSON content is stored unsanitized. A mind map node can carry a...

CVE-2025-67488 SiYuan: ZipSlip -> Arbitrary File Overwrite -> RCE

SiYuan is self-hosted, open source personal knowledge management software. Versions 0.0.0-20251202123337-6ef83b42c7ce and below contain function importZipMd which is vulnerable to ZipSlips, allowing an authenticated user to overwrite files on the system. An authenticated user with access to the...