CVE-2026-47727

Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the default-on "Safe import" filter fails to neutralize the shareTemplate relation because that relation is not marked as dangerous, allowing an attacker-supplied import archive to plant a server-side...

CVE-2026-53578

Trilium (versions ≤ 0.103.0), an open-source hierarchical note-taking application, contains a vulnerability in its default-on Safe import filter. The filter sanitizes HTML only for text notes and excludes the mindMap note type, whose JSON content is stored unsanitized. A mind map node can carry a...

CVE-2025-67488 SiYuan: ZipSlip -> Arbitrary File Overwrite -> RCE

SiYuan is self-hosted, open source personal knowledge management software. Versions 0.0.0-20251202123337-6ef83b42c7ce and below contain function importZipMd which is vulnerable to ZipSlips, allowing an authenticated user to overwrite files on the system. An authenticated user with access to the...