Read the docs

Trilium

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Trilium records in CISA KEV

No Trilium vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-61858 CVE-2026-91021 · GHSA-g94c-cfqp-6xq2

Cross-site scripting in Trilium Trillium Notes

Priority LOW 24

Trilium Notes, version v0.103.0 and earlier, contains a stored cross-site scripting (XSS) vulnerability in the share renderer for webView notes due to improper HTML escaping of user-controlled #webViewSrc values.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00226 Published 2026-09-14 No fix listed CWE-79
Open these records in search →