https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T19:18:56.527723+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-334548 EUVD-2026-334548 2026-10-22T19:18:56.530480+00:00 EUVD-2026-334548 https://cve.radiocsirt.org/vuln/fkie_cve-2022-29351 fkie_cve-2022-29351 2026-10-22T19:18:56.530518+00:00

An arbitrary file upload vulnerability in the file upload module of Tiddlywiki5 v5.2.2 allows attackers to execute arbitrary code via a crafted SVG file. Note: The vendor argues that this is not a legitimate issue and there is no vulnerability here.

 https://cve.radiocsirt.org/vuln/ghsa-cr9c-rhq6-vh53 Withdrawn: GHSA-cr9c-rhq6-vh53 — Withdrawn: Code execution via SVG file upload in tiddlywiki 2026-10-22T19:18:56.530558+00:00

Withdrawn by the publisher.

Affected: npm: tiddlywiki

## Withdrawn Advisory This advisory has been withdrawn because it has been found to not be valid. Please see the issue [here](https://github.com/Jermolene/TiddlyWiki5/issues/7384) for more information.

## Original Description

An arbitrary file upload vulnerability in the file upload module of Tiddlywiki5 v5.2.2 allows attackers to execute arbitrary code via a crafted SVG file.

 https://cve.radiocsirt.org/vuln/gsd-2022-29351 gsd-2022-29351 2026-10-22T19:18:56.530597+00:00 gsd-2022-29351