CVE-2022-29351: Tiddlywiki TIDDLYWIKI5

Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days.

An arbitrary file upload vulnerability in the file upload module of Tiddlywiki5 v5.2.2 allows attackers to execute arbitrary code via a crafted SVG file. Note: The vendor argues that this is not a legitimate issue and there is no vulnerability here.

Affected products

• Tiddlywiki TIDDLYWIKI5: version 5.2.2 only

Published 2022-05-16. Last modified 2026-07-09.