Joplin
by Joplin
Source repositories
CVEs (33)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-45673 | Hig | 0.58 | 8.9 | 0.01 | Jun 21, 2024 | Joplin is a free, open source note taking and to-do application. A remote code execution (RCE) vulnerability in affected versions allows clicking on a link in a PDF in an untrusted note to execute arbitrary shell commands. Clicking links in PDFs allows for arbitrary code… | ||
| CVE-2022-23340 | Cri | 0.57 | 9.8 | 0.02 | Feb 8, 2022 | Joplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results. | ||
| CVE-2024-40643 | Cri | 0.55 | 9.6 | 0.01 | Sep 9, 2024 | Joplin is a free, open source note taking and to-do application. Joplin fails to take into account that "<" followed by a non letter character will not be considered html. As such it is possible to do an XSS by putting an "illegal" tag within a tag. | ||
| CVE-2023-38506 | Hig | 0.53 | 8.2 | 0.00 | Jun 21, 2024 | Joplin is a free, open source note taking and to-do application. A Cross-site Scripting (XSS) vulnerability allows pasting untrusted data into the rich text editor to execute arbitrary code. HTML pasted into the rich text editor is not sanitized (or not sanitized properly). As… | ||
| CVE-2023-37898 | Hig | 0.53 | 8.2 | 0.00 | Jun 21, 2024 | Joplin is a free, open source note taking and to-do application. A Cross-site Scripting (XSS) vulnerability allows an untrusted note opened in safe mode to execute arbitrary code. `packages/renderer/MarkupToHtml.ts` renders note content in safe mode by surrounding it with … | ||
| CVE-2026-46649 | Cri | 0.52 | — | 0.01 | Sep 21, 2026 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's GET /api/login_with_code/:id endpoint accepts a nine-digit SSO authentication code with a ten-minute lifetime without applying… | ||
| CVE-2022-35131 | Cri | 0.52 | 9.0 | 0.02 | Jul 25, 2022 | Joplin v2.8.8 allows attackers to execute arbitrary commands via a crafted payload injected into the Node titles. | ||
| CVE-2022-40277 | Hig | 0.51 | 7.8 | 0.01 | Sep 30, 2022 | Joplin version 2.8.8 allows an external attacker to execute arbitrary commands remotely on any client that opens a link in a malicious markdown file, via Joplin. This is possible because the application does not properly validate the schema/protocol of existing links in the… | ||
| CVE-2024-49362 | Hig | 0.50 | 7.7 | 0.01 | Nov 14, 2024 | Joplin is a free, open source note taking and to-do application. Joplin-desktop has a vulnerability that leads to remote code execution (RCE) when a user clicks on an link within untrusted notes. The issue arises due to insufficient sanitization of tag attributes… | ||
| CVE-2024-53268 | Hig | 0.47 | 7.2 | 0.01 | Nov 25, 2024 | Joplin is an open source, privacy-focused note taking app with sync capabilities for Windows, macOS, Linux, Android and iOS. In affected versions attackers are able to abuse the fact that openExternal is used without any filtering of URI schemes to obtain remote code execution… | ||
| CVE-2026-22810 | Hig | 0.46 | 8.2 | 0.00 | May 18, 2026 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions prior to 3.5.7 contain a path traversal vulnerability in the importer which allows overwriting arbitrary files on disk. The OneNote converter does not sanitize the… | ||
| CVE-2026-55105 | Hig | 0.43 | 7.7 | 0.01 | Sep 21, 2026 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.6.15 and 3.7.2, packages/renderer/MdToHtml/rules/fountain.ts passes HTML generated by the vendored fountain.js renderer into note output without sanitizing it. A… | ||
| CVE-2026-59814 | Hig | 0.42 | 7.6 | 0.00 | Sep 21, 2026 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.7, Joplin Server's GET /shares/:id?resource_id= route serves a resource with the attacker-controlled mime value and omits Content-Disposition when the resource… | ||
| CVE-2026-55210 | Hig | 0.41 | 7.4 | 0.00 | Sep 21, 2026 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's UserModel.ssoLogin() returns an existing account matched by an IdP-asserted email without checking the account's is_external flag. In… | ||
| CVE-2026-49453 | Hig | 0.39 | 7.0 | 0.00 | Sep 21, 2026 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.6.15 and 3.7.2, Joplin accepts synchronized resource metadata whose id or file_extension contains parent-directory or path-separator characters.… | ||
| CVE-2026-49450 | Hig | 0.39 | 7.1 | 0.00 | Sep 21, 2026 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Desktop for Windows omits publisherName from packages/app-desktop/package.json, so the generated app-update.yml causes NsisUpdater.verifySignature()… | ||
| CVE-2026-55179 | Med | 0.35 | 6.5 | 0.00 | Sep 21, 2026 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's GET /items/:id/content route in packages/server/src/routes/index/items.ts loads item content from an attacker-supplied internal server ID… | ||
| CVE-2023-37299 | Med | 0.33 | 6.1 | 0.01 | Jun 30, 2023 | Joplin before 2.11.5 allows XSS via an AREA element of an image map. | ||
| CVE-2023-37298 | Med | 0.33 | 6.1 | 0.01 | Jun 30, 2023 | Joplin before 2.11.5 allows XSS via a USE element in an SVG document. | ||
| CVE-2021-37916 | Med | 0.33 | 6.1 | 0.01 | Aug 3, 2021 | Joplin before 2.0.9 allows XSS via button and form in the note body. |
- risk 0.58cvss 8.9epss 0.01
Joplin is a free, open source note taking and to-do application. A remote code execution (RCE) vulnerability in affected versions allows clicking on a link in a PDF in an untrusted note to execute arbitrary shell commands. Clicking links in PDFs allows for arbitrary code…
- risk 0.57cvss 9.8epss 0.02
Joplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results.
- risk 0.55cvss 9.6epss 0.01
Joplin is a free, open source note taking and to-do application. Joplin fails to take into account that "<" followed by a non letter character will not be considered html. As such it is possible to do an XSS by putting an "illegal" tag within a tag.
- risk 0.53cvss 8.2epss 0.00
Joplin is a free, open source note taking and to-do application. A Cross-site Scripting (XSS) vulnerability allows pasting untrusted data into the rich text editor to execute arbitrary code. HTML pasted into the rich text editor is not sanitized (or not sanitized properly). As…
- risk 0.53cvss 8.2epss 0.00
Joplin is a free, open source note taking and to-do application. A Cross-site Scripting (XSS) vulnerability allows an untrusted note opened in safe mode to execute arbitrary code. `packages/renderer/MarkupToHtml.ts` renders note content in safe mode by surrounding it with …
- risk 0.52cvss —epss 0.01
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's GET /api/login_with_code/:id endpoint accepts a nine-digit SSO authentication code with a ten-minute lifetime without applying…
- risk 0.52cvss 9.0epss 0.02
Joplin v2.8.8 allows attackers to execute arbitrary commands via a crafted payload injected into the Node titles.
- risk 0.51cvss 7.8epss 0.01
Joplin version 2.8.8 allows an external attacker to execute arbitrary commands remotely on any client that opens a link in a malicious markdown file, via Joplin. This is possible because the application does not properly validate the schema/protocol of existing links in the…
- risk 0.50cvss 7.7epss 0.01
Joplin is a free, open source note taking and to-do application. Joplin-desktop has a vulnerability that leads to remote code execution (RCE) when a user clicks on an link within untrusted notes. The issue arises due to insufficient sanitization of tag attributes…
- risk 0.47cvss 7.2epss 0.01
Joplin is an open source, privacy-focused note taking app with sync capabilities for Windows, macOS, Linux, Android and iOS. In affected versions attackers are able to abuse the fact that openExternal is used without any filtering of URI schemes to obtain remote code execution…
- risk 0.46cvss 8.2epss 0.00
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions prior to 3.5.7 contain a path traversal vulnerability in the importer which allows overwriting arbitrary files on disk. The OneNote converter does not sanitize the…
- risk 0.43cvss 7.7epss 0.01
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.6.15 and 3.7.2, packages/renderer/MdToHtml/rules/fountain.ts passes HTML generated by the vendored fountain.js renderer into note output without sanitizing it. A…
- risk 0.42cvss 7.6epss 0.00
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.7, Joplin Server's GET /shares/:id?resource_id= route serves a resource with the attacker-controlled mime value and omits Content-Disposition when the resource…
- risk 0.41cvss 7.4epss 0.00
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's UserModel.ssoLogin() returns an existing account matched by an IdP-asserted email without checking the account's is_external flag. In…
- risk 0.39cvss 7.0epss 0.00
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.6.15 and 3.7.2, Joplin accepts synchronized resource metadata whose id or file_extension contains parent-directory or path-separator characters.…
- risk 0.39cvss 7.1epss 0.00
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Desktop for Windows omits publisherName from packages/app-desktop/package.json, so the generated app-update.yml causes NsisUpdater.verifySignature()…
- risk 0.35cvss 6.5epss 0.00
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's GET /items/:id/content route in packages/server/src/routes/index/items.ts loads item content from an attacker-supplied internal server ID…
- risk 0.33cvss 6.1epss 0.01
Joplin before 2.11.5 allows XSS via an AREA element of an image map.
- risk 0.33cvss 6.1epss 0.01
Joplin before 2.11.5 allows XSS via a USE element in an SVG document.
- risk 0.33cvss 6.1epss 0.01
Joplin before 2.0.9 allows XSS via button and form in the note body.
Page 1 of 2