Flatnotes
by Flatnotes
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-50873 | Cri | 0.64 | 9.8 | 0.00 | Jun 15, 2026 | An arbitrary file upload vulnerability in the attachment handling component of flatnotes v5.5.4 allows attackers to execute arbitrary code via uploading a crafted HTML or SVG file. | ||
| CVE-2024-54730 | Hig | 0.49 | 7.5 | 0.01 | Jan 14, 2025 | Flatnotes <v5.3.1 is vulnerable to denial of service through the upload image function. |
- risk 0.64cvss 9.8epss 0.00
An arbitrary file upload vulnerability in the attachment handling component of flatnotes v5.5.4 allows attackers to execute arbitrary code via uploading a crafted HTML or SVG file.
- risk 0.49cvss 7.5epss 0.01
Flatnotes <v5.3.1 is vulnerable to denial of service through the upload image function.