Vulnerabilities

TI-2026-30458 CVE-2026-42090

Notesnook: RCE via stored XSS in note export rendering

MEDIUM 43

Notesnook is a note-taking app focused on user privacy & ease of use.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00477 Published 2026-05-04 No fix listed CWE-79

TI-2026-26305 CVE-2026-33955

HIGH 72

Notesnook is a note-taking app.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00351 Published 2026-03-27 Fixed in 3.3.11 CWE-79

TI-2026-26317 CVE-2026-33976

HIGH 76

Notesnook is a note-taking app.

CVSS 3.1CRITICAL 9.7 Network No auth User interaction EPSS 0.00719 Published 2026-03-27 Fixed in 3.3.11, 3.3.17 CWE-79

TI-2026-24428 CVE-2026-31876

LOW 24

Notesnook is a note-taking app focused on user privacy & ease of use.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00205 Published 2026-03-11 Fixed in 3.3.9 CWE-79