https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 09:48:03 +0000 https://cve.radiocsirt.org/vuln/cve-2025-68621 <p><strong>Affected:</strong> TriliumNext Trilium</p> <p>Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large personal knowledge bases. Prior to 0.101.0, a critical timing attack vulnerability in Trilium&#39;s sync authentication endpoint allows unauthenticated remote attackers to recover HMAC authentication hashes byte-by-byte through statistical timing analysis. This enables complete authentication bypass without password knowledge, granting full read/write access to victim&#39;s knowledge base. This vulnerability is fixed in 0.101.0.</p> <p><strong>Affected:</strong> TriliumNext Trilium</p> <p>Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large personal knowledge bases. Prior to 0.101.0, a critical timing attack vulnerability in Trilium&#39;s sync authentication endpoint allows unauthenticated remote attackers to recover HMAC authentication hashes byte-by-byte through statistical timing analysis. This enables complete authentication bypass without password knowledge, granting full read/write access to victim&#39;s knowledge base. This vulnerability is fixed in 0.101.0.</p> https://cve.radiocsirt.org/vuln/cve-2025-68621