Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2022-2365: fix note title escaping in export dialog · zadam/trilium@1dfc377

stored XSS

CVE
#xss

@@ -213,10 +213,7 @@ export default class ExportDialog extends BasicWidget {

const {noteId, parentNoteId} = treeService.getNoteIdAndParentIdFromNotePath(notePath);

this.branchId = await froca.getBranchId(parentNoteId, noteId);

const noteTitle = await treeService.getNoteTitle(noteId);

this.$noteTitle.html(noteTitle);

this.$noteTitle.text(await treeService.getNoteTitle(noteId));

}

exportBranch(branchId, type, format, version) {

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907