Priority HIGH 80
Joplin is a free, open source note taking and to-do application.
laurent22
Records40All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9
Exploited now
laurent22 records in CISA KEVNo laurent22 vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
40 records
TI-2024-32950 CVE-2024-49362 · GHSA-hff8-hjwv-j9q7
Remote Code Execution on click of <a> Link in markdown preview
Priority HIGH 76
Joplin is a free, open source note taking and to-do application.
Priority HIGH 75
Joplin is a free, open source note taking and to-do application.
TI-2026-34297 CVE-2026-46649
Joplin: SSO Auth Code Login Missing Rate Limiting — 9-Digit Numeric Code Brute-Forceable via Unprotected Endpoint
Priority HIGH 74
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
TI-2025-17795 CVE-2025-24028
Cross-site Scripting (XSS) in Rich Text Editor allows arbitrary code execution in Joplin
Priority HIGH 74
Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks.
Priority HIGH 73
Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks.
TI-2024-35730 CVE-2024-53268
Lack of validation on openExternal allows 1 click remote code execution in joplin
Priority HIGH 73
Joplin is an open source, privacy-focused note taking app with sync capabilities for Windows, macOS, Linux, Android and iOS.
Priority HIGH 72
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
TI-2025-20244 CVE-2025-27409
Joplin Server Vulnerable to Path Traversal
Priority HIGH 72
Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks.
TI-2026-18327 CVE-2026-22810 · GHSA-gcmj-c9gg-9vh6
Joplin: Path traversal in OneNote importer allows overwriting arbitrary files
Priority HIGH 71
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
TI-2025-18856 CVE-2025-25187
Cross-site Scripting in Goto Anything allows arbitrary code execution in Joplin
Priority HIGH 69
Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks.
TI-2023-19886 CVE-2023-38506
Cross-site Scripting (XSS) when pasting HTML into the rich text editor in Joplin
Priority HIGH 69
Joplin is a free, open source note taking and to-do application.
Priority HIGH 69
Joplin is a free, open source note taking and to-do application.
TI-2026-39804 CVE-2026-55105
Joplin: Fountain embeds allow arbitrary script execution in published notes and the note viewer
Priority HIGH 67
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
TI-2026-42631 CVE-2026-59814
Joplin: Stored XSS via inline-served note attachment on published shares
Priority HIGH 66
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
Priority HIGH 66
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
TI-2026-36608 CVE-2026-49453
Joplin: Path traversal in resource sync — silent arbitrary file write outside the resource directory
Priority MEDIUM 64
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
TI-2026-39863 CVE-2026-55179
Joplin: Logic error in Joplin Server allows a signed-in user to read any note from its internal server ID
Priority MEDIUM 62
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
TI-2026-26847 CVE-2026-34600
Joplin Server delta API returns note content after share access is revoked
Priority MEDIUM 59
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
TI-2025-35681 CVE-2025-57798
Joplin has Denial of Service (DoS) via Uncontrolled Resource Allocation through Title Input
Priority MEDIUM 58
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
Priority MEDIUM 58
Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks.
Priority MEDIUM 55
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
Priority MEDIUM 54
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
TI-2026-34298 CVE-2026-46650
Joplin: Stored XSS in public share viewer via javascript: URL bypass in isAcceptedUrl
Priority MEDIUM 54
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
TI-2026-42633 CVE-2026-59816
Joplin: Path traversal in transcribe proxy endpoint via URL-encoded slash
Priority MEDIUM 53
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.