Triliumnotes Trilium vulnerabilities
- triliumnext trilium Trilium unauthenticated share-search discloses password-protected and hidden shared notes 7.5 High
- triliumnext trilium Trilium arbitrary file read and denial of service via file:// URLs in the automatic image-download feature 8.1 High
- triliumnext trilium Trilium: Note Import to RCE via Book Note 9.3 Critical
- triliumnext trilium Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtml 9.3 Critical
- triliumnext trilium Trilium: Malicious import with GeoMap marker title XSS leads to RCE on the desktop client 9.3 Critical
- triliumnext trilium Trilium: RCE via `shareTemplate` relation missing `isDangerous` flag — Safe import bypass leading to EJS SSTI (Incomplete Fix of CVE-2026-45668) 8.6 High
- triliumnext trilium Trilium Notes has a Timing Attack Vulnerability in /api/login/sync 7.4 High
- triliumnotes trilium, zadam zadam/trilium +1 more Cross-site Scripting (XSS) - Reflected in zadam/trilium 6.4 Medium