Vulnerabilities (CVE)

Filtered by vendor Notable Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-26198 1 Notable 1 Notable 2023-08-08 7.5 HIGH 9.8 CRITICAL
Notable v1.8.4 does not filter text editing, allowing attackers to execute arbitrary code via a crafted payload injected into the Title text field.
CVE-2020-16608 1 Notable 1 Notable 2020-12-11 9.3 HIGH 9.6 CRITICAL
Notable 1.8.4 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferences is true).