p PatchFirst

CVE-2026-14722

CVE-2026-14722 · tiddly-gittly TidGi-Desktop Git Repository Import loadWikiTiddlersWithSubWikis.ts code injection

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A vulnerability was found in tiddly-gittly TidGi-Desktop up to 0.13.0. This impacts an unknown function of the file src/services/wiki/wikiWorker/loadWikiTiddlersWithSubWikis.ts of the component Git Repository Import. The manipulation results in code injection. The attack may be performed from remote. The exploit has been made public and could be used.

CVSS 6.9 · Medium · EPSS 0.5%

Published
Updated

Stack: node

Affected products and versions

  • tidgi-desktop

    Versions
    • 0.1: Affected
    • 0.2: Affected
    • 0.3: Affected
    • 0.4: Affected
    • 0.5: Affected
    • 0.6: Affected
    • 0.7: Affected
    • 0.8: Affected
    • 0.9: Affected
    • 0.10: Affected
    • 0.11: Affected
    • 0.12: Affected
    • 0.13.0: Affected

    No fix published

  • tidgi npm

    Affected ranges
    • SEMVER: ≤ 0.13.0

    No fix published

Original sources

Check your server →