CVE-2026-77438 Trilium unauthenticated share-search discloses password-protected and hidden shared notes

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the public share-search endpoint does not enforce the per-note shareCredentials and shareHiddenFromTree controls, allowing an unauthenticated visitor to read the titles, tree paths, and conten...

Memono Information Disclosure Vulnerability

Memono is a cross-platform multimedia note-taking application. A security vulnerability exists in Memono version 3.8. An attacker can exploit the vulnerability to read password-protected notes without a password...