All 2 CVE vulnerabilities found in notesnook, with AI-generated Chinese analysis, references, and POCs.
Vendor: streetwriters
| CVE ID | Title | CVSS | Severity | Paused |
|---|---|---|---|---|
| CVE-2026-33978 | Notesnook: Stored XSS in mobile share editor via unescaped web clip title metadata CWE-79 | 5.4 | Medium | 2026-04-01 |
| CVE-2026-31876 | Notesnook has Stored XSS via unsanitized Twitter/X embed URL in editor (`tweetToEmbed`) CWE-79 | 5.4 | Medium | 2026-03-11 |
All 2 known CVE vulnerabilities affecting notesnook with full Chinese analysis, references, and POCs where available.