Hoch 8.8Software
CVE-2026-47727
Trilium is an open-source hierarchical note-taking application.
Trilium
Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the default-on "Safe import" filter fails to neutralize the shareTemplate relation because that relation is not marked as dangerous, allowing an attacker-supplied import archive to plant a server-side template that leads to remote code execution. The relation is omitted from the built-in list of dangerous attributes, so unlike other code-loading relations it is not disabled on…
27. Aug 2026
Original bei NVD öffnen