← All advisories

Critical severity9.8NVD Advisory· Published Feb 8, 2022· Updated Jun 17, 2026

CVE-2022-23340

CVE-2022-23340

Description

Joplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
joplinnpm	< 2.7.1	2.7.1

Affected products

3

ghsa-coords
pkg:npm/joplin
Range: < 2.7.1
Joplin/Joplincpe-rescue
Joplin Project/Joplin
cpe:2.3:a:joplin_project:joplin:2.6.10:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-8478-53pv-jxvmghsaADVISORY
github.com/laurent22/joplin/issues/6004nvdIssue TrackingThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2022-23340ghsaADVISORY
github.com/laurent22/joplin/commit/810018b41f4d9f0c2fd9af4b8fd332fa4a0210f0ghsaWEB

News mentions

0

No linked articles in our index yet.