Priority HIGH 72
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
Vulnerabilities
40 records
Priority MEDIUM 55
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
Priority MEDIUM 54
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
Priority LOW 36
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
TI-2026-34298 CVE-2026-46650
Joplin: Stored XSS in public share viewer via javascript: URL bypass in isAcceptedUrl
Priority MEDIUM 54
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
TI-2026-42632 CVE-2026-59815
Joplin: Pending share recipients can write items into shared folders before accepting invitations
Priority MEDIUM 53
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
TI-2026-39890 CVE-2026-55210
Joplin: SAML SSO account takeover via email-based account linking (missing is_external check in ssoLogin)
Priority LOW 35
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
TI-2026-42631 CVE-2026-59814
Joplin: Stored XSS via inline-served note attachment on published shares
Priority HIGH 66
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
TI-2026-39804 CVE-2026-55105
Joplin: Fountain embeds allow arbitrary script execution in published notes and the note viewer
Priority HIGH 67
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
TI-2026-34297 CVE-2026-46649
Joplin: SSO Auth Code Login Missing Rate Limiting — 9-Digit Numeric Code Brute-Forceable via Unprotected Endpoint
Priority HIGH 74
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
TI-2026-39863 CVE-2026-55179
Joplin: Logic error in Joplin Server allows a signed-in user to read any note from its internal server ID
Priority MEDIUM 62
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
TI-2026-42633 CVE-2026-59816
Joplin: Path traversal in transcribe proxy endpoint via URL-encoded slash
Priority MEDIUM 53
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
TI-2026-36604 CVE-2026-49449
Joplin: KaTeX `trust:true` enables URL-allowlist bypass leading to NTLMv2 credential theft via UNC path on Windows
Priority MEDIUM 46
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
TI-2026-36608 CVE-2026-49453
Joplin: Path traversal in resource sync — silent arbitrary file write outside the resource directory
Priority MEDIUM 64
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
Priority HIGH 66
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
TI-2026-26847 CVE-2026-34600
Joplin Server delta API returns note content after share access is revoked
Priority MEDIUM 59
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
TI-2025-35681 CVE-2025-57798
Joplin has Denial of Service (DoS) via Uncontrolled Resource Allocation through Title Input
Priority MEDIUM 58
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
TI-2026-18327 CVE-2026-22810 · GHSA-gcmj-c9gg-9vh6
Joplin: Path traversal in OneNote importer allows overwriting arbitrary files
Priority HIGH 71
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.
Priority HIGH 73
Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks.
TI-2025-20244 CVE-2025-27409
Joplin Server Vulnerable to Path Traversal
Priority HIGH 72
Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks.
TI-2025-18856 CVE-2025-25187
Cross-site Scripting in Goto Anything allows arbitrary code execution in Joplin
Priority HIGH 69
Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks.
TI-2025-17795 CVE-2025-24028
Cross-site Scripting (XSS) in Rich Text Editor allows arbitrary code execution in Joplin
Priority HIGH 74
Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks.
Priority MEDIUM 58
Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks.
TI-2024-35730 CVE-2024-53268
Lack of validation on openExternal allows 1 click remote code execution in joplin
Priority HIGH 73
Joplin is an open source, privacy-focused note taking app with sync capabilities for Windows, macOS, Linux, Android and iOS.
TI-2024-32950 CVE-2024-49362 · GHSA-hff8-hjwv-j9q7
Remote Code Execution on click of <a> Link in markdown preview
Priority HIGH 76
Joplin is a free, open source note taking and to-do application.