CVE-2026-14722: Tiddly-Gittly Tidgi-Desktop

High severity, CVSS 7.3. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability was found in tiddly-gittly TidGi-Desktop up to 0.13.0. This impacts an unknown function of the file src/services/wiki/wikiWorker/loadWikiTiddlersWithSubWikis.ts of the component Git Repository Import. The manipulation results in code injection. The attack may be performed from remote. The exploit has been made public and could be used.

Affected products

• Tiddly-Gittly Tidgi-Desktop: version 0.1 only; version 0.2 only; version 0.3 only; version 0.4 only; version 0.5 only; version 0.6 only; …

Published 2026-07-05. Last modified 2026-07-06.