tiddlywiki5 vulnerabilities

CVEs whose affected-version data names the tiddlywiki5 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2022-29351Critical· 9.8

4y ago

An arbitrary file upload vulnerability in the file upload module of Tiddlywiki5 v5.2.2 allows attackers to execute arbitrary code via a crafted SVG file

An arbitrary file upload vulnerability in the file upload module of Tiddlywiki5 v5.2.2 allows attackers to execute arbitrary code via a crafted SVG file. Note: The vendor argues that this is not a legitimate issue and there is no vulnera…

▾ Midnighttiddlywiki · tiddlywiki5EPSS 2.5%via NVD