What’s Vulnerable › Products

streetwriters Notesnook Web/Desktop vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your streetwriters Notesnook Web/Desktop version is affected

Latest streetwriters Notesnook Web/Desktop vulnerabilities

• CVE-2026-42090 — Notesnook: RCE via stored XSS in note export rendering (CVSS 9.6)
• CVE-2026-33976 — Notesnook vulnerable to RCE via stored XSS in Web Clipper rendering (CVSS 9.6)
• CVE-2026-33955 — Notesnook vulnerable to RCE via stored XSS in Note History diff viewer (CVSS 8.6)
• CVE-2026-31876 — Notesnook has Stored XSS via unsanitized Twitter/X embed URL in editor (`tweetToEmbed`) (CVSS 5.4)