What’s Vulnerable › Products

Joplin vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Joplin version is affected

Latest Joplin vulnerabilities

• CVE-2026-22810 — Joplin: Path traversal in OneNote importer allows overwriting arbitrary files (CVSS 7.3)
• CVE-2022-40277 — (CVSS 7.8)
• CVE-2022-35131 — (CVSS 9.0)
• CVE-2021-23431 — Cross-site Request Forgery (CSRF) (CVSS 8.8)