VYPR

notesnook

by GitHub

CVEs (1)

  • CVE-2026-31876MedMar 11, 2026
    risk 0.00cvss 5.4epss 0.00

    Notesnook is a note-taking app focused on user privacy & ease of use. Prior to 3.3.9, a Stored Cross-Site Scripting (XSS) vulnerability existed in Notesnook's editor embed component when rendering Twitter/X embed URLs. The tweetToEmbed() function in component.tsx interpolated…