Vendor
Flatnotes
Products
1
CVEs
2
Across products
2
Status
Private
Products
1- 2 CVEs
Recent CVEs
2| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-50873 | Cri | 0.64 | 9.8 | 0.00 | Jun 15, 2026 | An arbitrary file upload vulnerability in the attachment handling component of flatnotes v5.5.4 allows attackers to execute arbitrary code via uploading a crafted HTML or SVG file. | ||
| CVE-2024-54730 | Hig | 0.49 | 7.5 | 0.01 | Jan 14, 2025 | Flatnotes <v5.3.1 is vulnerable to denial of service through the upload image function. |
- risk 0.64cvss 9.8epss 0.00
An arbitrary file upload vulnerability in the attachment handling component of flatnotes v5.5.4 allows attackers to execute arbitrary code via uploading a crafted HTML or SVG file.
- risk 0.49cvss 7.5epss 0.01
Flatnotes <v5.3.1 is vulnerable to denial of service through the upload image function.