Codexu Notegen vulnerabilities

• codexu notegen NoteGen through 0.38.3 Local File Disclosure via Chat Image Analysis CVE-2026-111935 2.1 LowOctober 19, 2026
• codexu notegen NoteGen arbitrary OS command execution via Tauri shell:allow-execute for bash/python CVE-2026-17497 8.3 HighJuly 26, 2026
• codexu notegen NoteGen chat preview XSS via unsanitized AI/skill HTML rendering CVE-2026-17496 8.1 HighJuly 26, 2026