Joplin Project vulnerabilities

Products

• Joplin 22

Newest

• joplin project joplin Privilege escalation in Joplin server via user patch endpoint CVE-2025-27134 8.8 HighApril 30, 2025
• joplin project joplin Joplin Server Vulnerable to Path Traversal CVE-2025-27409 7.5 HighApril 30, 2025
• joplin project joplin Cross-site Scripting in Goto Anything allows arbitrary code execution in Joplin CVE-2025-25187 7.8 HighFebruary 7, 2025
• joplin project joplin Cross-site Scripting (XSS) in Rich Text Editor allows arbitrary code execution in Joplin CVE-2025-24028 Fix available 7.8 HighFebruary 7, 2025
• joplin project joplin DOM Clobbering leads to temporary DOS in the note viewer in Joplin CVE-2024-55630 3.3 LowFebruary 7, 2025
• joplin project joplin Lack of validation on openExternal allows 1 click remote code execution in joplin CVE-2024-53268 7.3 HighNovember 25, 2024
• joplin project joplin Remote Code Execution on click of <a> Link in markdown preview CVE-2024-49362 Fix available 7.7 HighNovember 14, 2024
• joplin project joplin Joplin has a parsing error leading to Cross-site Scripting (XSS) CVE-2024-40643 9.7 CriticalSeptember 9, 2024
• joplin project joplin Safe mode Cross-site Scripting (XSS) vulnerability in Joplin CVE-2023-37898 8.2 HighJune 21, 2024
• joplin project joplin Cross-site Scripting (XSS) when pasting HTML into the rich text editor in Joplin CVE-2023-38506 8.2 HighJune 21, 2024
• joplin project joplin Cross site scripting (XSS) when clicking on an untrusted `<map>` link in Joplin CVE-2023-39517 8.2 HighJune 21, 2024
• joplin project joplin Arbitrary code execution on click of PDF links in Joplin CVE-2023-45673 8.9 HighJune 21, 2024
• joplin project joplin Joplin Cross-site Scripting vulnerability CVE-2023-37299 Fix available 6.1 MediumJune 30, 2023
• joplin project joplin Joplin Cross-site Scripting vulnerability CVE-2023-37298 Fix available 6.1 MediumJune 30, 2023
• joplin project joplin Joplin Desktop App vulnerable to Cross-site Scripting CVE-2022-45598 Fix available 6.1 MediumJanuary 31, 2023
• joplin project joplin Joplin Cross Site Scripting Vulnerability via NOSCRIPT tags CVE-2021-33295 Fix available 5.4 MediumJune 16, 2022
• joplin project joplin Joplin Vulnerable to Code Injection CVE-2022-23340 Fix available 9.8 CriticalFebruary 8, 2022
• joplin project joplin Joplin vulnerable to Cross-site Scripting in notes CVE-2021-37916 Fix available 6.1 MediumAugust 2, 2021
• joplin project joplin Cross-site scripting in Joplin CVE-2020-28249 Public exploitFix available 6.1 MediumNovember 6, 2020
• joplin project joplin Cross-site Scripting in Joplin CVE-2020-15930 Public exploitFix available 6.1 MediumSeptember 24, 2020
• joplin project joplin Cross-site Scripting in Joplin CVE-2020-9038 Public exploitFix available 5.4 MediumFebruary 17, 2020
• joplin project joplin Joplin Vulnerable to Cross-site Scripting in Note Content CVE-2018-1000534 Fix available 6.1 MediumJune 26, 2018