Approved changes feed: RSS · Atom
cpe:2.3:a:triliumnotes:trilium:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Triliumnotes (00602cef-2f16-5b00-bd74-b094b6816298) |
|---|---|
| Product | Trilium (0f44bd35-2b93-551a-80d0-34f4c0bcaa60) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/triliumnext/trilium |
purl2cpe | 2026-07-28 16:41:16.291037 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-68621 |
vulnerable | 2026-06-08 07:41:21.472790 |
Trilium Notes has a Timing Attack Vulnerability in /api/login/sync
HIGH (7.4)
Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large personal knowledge bases. Prior to 0.101.0, a critical timing attack vulnerability in Trilium's sync authentication endpoint allows unauthenticated remote attackers to recover HMAC authentication hashes byte-by-byte through statistical timing analysis. This enables complete authentication bypass without password knowledge, granting full read/write access to victim's knowledge base. This vulnerability is fixed in 0.101.0.
Published: 2026-02-06T21:21:19.308Z
Updated: 2026-02-09T15:26:56.399Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2290 |
vulnerable | 2026-06-08 05:43:35.203837 |
Cross-site Scripting (XSS) - Reflected in zadam/trilium
MEDIUM (6.4)
Cross-site Scripting (XSS) - Reflected in GitHub repository zadam/trilium prior to 0.52.4, 0.53.1-beta.
Published: 2022-07-03T06:05:13.000Z
Updated: 2024-08-03T00:32:09.599Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.