Approved changes feed: RSS · Atom

cpe:2.3:a:trilium_project:trilium:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTrilium Project (506b27a2-7395-50d4-a920-6dda386fb653)
ProductTrilium (312813d4-2ddc-559d-a36f-8bf6eebd0082)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/zadam/trilium purl2cpe 2026-06-01 10:12:09.704575
pkg:github/zadam/trilium purl2cpe 2026-06-01 10:12:09.704577
pkg:sourceforge/trilium-notes.mirror purl2cpe 2026-06-01 10:12:09.704579

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-3067 vulnerable 2026-06-08 06:09:38.422193 Cross-site Scripting (XSS) - Stored in zadam/trilium
MEDIUM (4.6)
Cross-site Scripting (XSS) - Stored in GitHub repository zadam/trilium prior to 0.59.4.
Published: 2023-06-02T00:00:00.000Z
Updated: 2025-01-08T19:46:14.208Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2365 vulnerable 2026-06-08 05:43:35.409767 Cross-site Scripting (XSS) - Stored in zadam/trilium
MEDIUM (4)
Cross-site Scripting (XSS) - Stored in GitHub repository zadam/trilium prior to 0.53.3.
Published: 2022-07-10T21:50:10.000Z
Updated: 2024-08-03T00:32:09.698Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2290 vulnerable 2026-06-08 05:43:35.203266 Cross-site Scripting (XSS) - Reflected in zadam/trilium
MEDIUM (6.4)
Cross-site Scripting (XSS) - Reflected in GitHub repository zadam/trilium prior to 0.52.4, 0.53.1-beta.
Published: 2022-07-03T06:05:13.000Z
Updated: 2024-08-03T00:32:09.599Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.