agentprime: triliumEvery new CVE for trilium.https://agentprime.io/CVE-2026-77438: Trilium unauthenticated share-search discloses password-protected and hidden shared noteshttps://agentprime.io/advisories/CVE-2026-77438/https://agentprime.io/advisories/CVE-2026-77438/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 19:52:55 GMTCVECVE-2026-53580: Trilium arbitrary file read and denial of service via file:// URLs in the automatic image-download featurehttps://agentprime.io/advisories/CVE-2026-53580/https://agentprime.io/advisories/CVE-2026-53580/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 19:46:12 GMTCVECVE-2026-53579: Trilium: Note Import to RCE via Book Notehttps://agentprime.io/advisories/CVE-2026-53579/https://agentprime.io/advisories/CVE-2026-53579/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 19:33:24 GMTCVEcriticalCVE-2026-53578: Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtmlhttps://agentprime.io/advisories/CVE-2026-53578/https://agentprime.io/advisories/CVE-2026-53578/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 19:21:21 GMTCVEcriticalCVE-2026-48996: Trilium: Malicious import with GeoMap marker title XSS leads to RCE on the desktop clienthttps://agentprime.io/advisories/CVE-2026-48996/https://agentprime.io/advisories/CVE-2026-48996/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 17:36:07 GMTCVEcriticalCVE-2026-47727: Trilium: RCE via `shareTemplate` relation missing `isDangerous` flag — Safe import bypass leading to EJS SSTI (Incomplete Fix of CVE-2026-45668)https://agentprime.io/advisories/CVE-2026-47727/https://agentprime.io/advisories/CVE-2026-47727/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 16:51:35 GMTCVECVE-2026-45733: Trilium: Stored XSS in note icon rendering leads to Remote Code Execution in Electron desktop apphttps://agentprime.io/advisories/CVE-2026-45733/https://agentprime.io/advisories/CVE-2026-45733/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 15:13:16 GMTCVECVE-2026-45668: Trilium Notes : Note Import to RCE via #docName Path Traversal (Safe Import Enabled)https://agentprime.io/advisories/CVE-2026-45668/https://agentprime.io/advisories/CVE-2026-45668/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 May 2026 17:18:28 GMTCVEcriticalCVE-2026-39311: Trilium Notes: Stored XSS Leads to Unauthorized Remote Code Execution (RCE) via Unsanitized SVG Attachmentshttps://agentprime.io/advisories/CVE-2026-39311/https://agentprime.io/advisories/CVE-2026-39311/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 19:13:00 GMTCVECVE-2026-39310: Trilium Notes: Authentication Bypass in Clipper API for Electron (Desktop) Buildshttps://agentprime.io/advisories/CVE-2026-39310/https://agentprime.io/advisories/CVE-2026-39310/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 19:05:41 GMTCVECVE-2026-39309: Trilium Notes: macOS TCC Bypass via Prompt Spoofinghttps://agentprime.io/advisories/CVE-2026-39309/https://agentprime.io/advisories/CVE-2026-39309/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 May 2026 23:54:46 GMTCVECVE-2026-35593: Trilium Notes has Local File Inclusion via upload modified file API endpointhttps://agentprime.io/advisories/CVE-2026-35593/https://agentprime.io/advisories/CVE-2026-35593/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 May 2026 23:32:54 GMTCVECVE-2025-68621: Trilium Notes has a Timing Attack Vulnerability in /api/login/synchttps://agentprime.io/advisories/CVE-2025-68621/https://agentprime.io/advisories/CVE-2025-68621/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Feb 2026 21:21:19 GMTCVECVE-2025-53544: Trilium Notes is Vulnerable to Brute-force Protection Bypass via Initial Sync Seed Retrievalhttps://agentprime.io/advisories/CVE-2025-53544/https://agentprime.io/advisories/CVE-2025-53544/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 Aug 2025 00:14:33 GMTCVE