What’s Vulnerable › Products

streetwriters notesnook vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your streetwriters notesnook version is affected

Latest streetwriters notesnook vulnerabilities

• CVE-2026-42090 — Notesnook: RCE via stored XSS in note export rendering (CVSS 9.6)
• CVE-2026-33978 — Notesnook: Stored XSS in mobile share editor via unescaped web clip title metadata (CVSS 6.1)
• CVE-2026-33976 — Notesnook vulnerable to RCE via stored XSS in Web Clipper rendering (CVSS 9.6)
• CVE-2026-31876 — Notesnook has Stored XSS via unsanitized Twitter/X embed URL in editor (`tweetToEmbed`) (CVSS 5.4)