VendorsStreetwritersnotesnook_mobileany version
Vulnerabilities

Streetwriters Notesnook Mobile any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2026-42090
Notesnook: RCE via stored XSS in note export rendering
Published 2026-05-04 · Analyzed
9.6EPSS 0.008
CVE-2026-33976
Notesnook vulnerable to RCE via stored XSS in Web Clipper rendering
Published 2026-03-27 · Analyzed
9.6EPSS 0.007
CVE-2026-33978
Notesnook: Stored XSS in mobile share editor via unescaped web clip title metadata
Published 2026-04-01 · Analyzed
6.1EPSS 0.003
CVE-2026-31876
Notesnook has Stored XSS via unsanitized Twitter/X embed URL in editor (`tweetToEmbed`)
Published 2026-03-11 · Analyzed
5.4EPSS 0.002