VendorsStreetwritersnotesnook_desktopall versions
Vulnerabilities

Streetwriters Notesnook Desktop

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2026-42090
Notesnook: RCE via stored XSS in note export rendering
Published 2026-05-04 · Analyzed
9.6EPSS 0.008
CVE-2026-33976
Notesnook vulnerable to RCE via stored XSS in Web Clipper rendering
Published 2026-03-27 · Analyzed
9.6EPSS 0.007
CVE-2026-33955
Notesnook vulnerable to RCE via stored XSS in Note History diff viewer
Published 2026-03-27 · Modified
8.6EPSS 0.003
CVE-2026-31876
Notesnook has Stored XSS via unsanitized Twitter/X embed URL in editor (`tweetToEmbed`)
Published 2026-03-11 · Analyzed
5.4EPSS 0.002