VYPR
Critical severity9.6NVD Advisory· Published Dec 10, 2020· Updated Jun 17, 2026

CVE-2020-16608

CVE-2020-16608

Description

Notable 1.8.4 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferences is true).

Affected products

3
  • notable/Notablellm-fuzzy2 versions
    <=1.8.4+ 1 more
    • (no CPE)range: <=1.8.4
    • cpe:2.3:a:notable:notable:1.8.4:*:*:*:*:*:*:*
  • Notable/Notabledescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.