What’s Vulnerable › Products

Open Notebook vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Open Notebook version is affected

Latest Open Notebook vulnerabilities

• CVE-2026-90769 — Open Notebook before 1.11.0 Server-Side Request Forgery via link-source (CVSS 7.7)
• CVE-2026-33589 — Arbitrary File Read via Local File Inclusion (LFI) (CVSS 6.5)
• CVE-2026-33588 — Arbitrary File Write Through Path Traversal (CVSS 8.1)
• CVE-2026-33587 — Remote Code Execution (RCE) via Server-Side Template Injection (SSTI) (CVSS 10.0)
• CVE-2026-28201 — SurrealDB Injection on Open Notebook (CVSS 7.8)