Skip to contentLaurent22 Joplin vulnerabilities
- laurent22 joplinJoplin: Unauthenticated account takeover via an attacker-chosen application-authorisation identifierCVE-2026-1057868.5 High
- laurent22 joplinJoplin Server password reset accepts tokens issued for unrelated purposesCVE-2026-1057854.8 Medium
- laurent22 joplinJoplin whiteboard card rendering allows CSS injection into application chromeCVE-2026-1057844.6 Medium
- laurent22 joplinJoplin Web Clipper pairing allows cross-origin theft of a permanent API tokenCVE-2026-1057838.0 High
- laurent22 joplinJoplin: Stored XSS in public share viewer via javascript: URL bypass in isAcceptedUrlCVE-2026-466504.4 Medium
- laurent22 joplinJoplin: Pending share recipients can write items into shared folders before accepting invitationsCVE-2026-598154.3 Medium
- laurent22 joplinJoplin: SAML SSO account takeover via email-based account linking (missing is_external check in ssoLogin)CVE-2026-552107.4 High
- laurent22 joplinJoplin: Stored XSS via inline-served note attachment on published sharesCVE-2026-598147.6 High
- laurent22 joplinJoplin: Fountain embeds allow arbitrary script execution in published notes and the note viewerCVE-2026-551057.7 High
- laurent22 joplinJoplin: SSO Auth Code Login Missing Rate Limiting — 9-Digit Numeric Code Brute-Forceable via Unprotected EndpointCVE-2026-466499.1 Critical
- laurent22 joplinJoplin: Logic error in Joplin Server allows a signed-in user to read any note from its internal server IDCVE-2026-551796.5 Medium
- laurent22 joplinJoplin: Path traversal in transcribe proxy endpoint via URL-encoded slashCVE-2026-598164.3 Medium
- laurent22 joplinJoplin: KaTeX `trust:true` enables URL-allowlist bypass leading to NTLMv2 credential theft via UNC path on WindowsCVE-2026-494492.5 Low
- laurent22 joplinJoplin: Path traversal in resource sync — silent arbitrary file write outside the resource directoryCVE-2026-494537.0 High
- laurent22 joplinJoplin desktop Windows auto-updater accepts signed installer from any publisher because app-update.yml has no publisherNameCVE-2026-494507.1 High
- laurent22 joplinJoplin Server delta API returns note content after share access is revokedCVE-2026-346005.7 Medium
- laurent22 joplinJoplin has Denial of Service (DoS) via Uncontrolled Resource Allocation through Title InputCVE-2025-577985.5 Medium
- joplinapp joplin, msiemens one2html +1 moreJoplin: Path traversal in OneNote importer allows overwriting arbitrary filesCVE-2026-22810Fix available8.2 High
- joplin project joplinPrivilege escalation in Joplin server via user patch endpointCVE-2025-271348.8 High
- joplin project joplinJoplin Server Vulnerable to Path TraversalCVE-2025-274097.5 High
- joplin project joplinCross-site Scripting in Goto Anything allows arbitrary code execution in JoplinCVE-2025-251877.8 High
- joplin project joplinCross-site Scripting (XSS) in Rich Text Editor allows arbitrary code execution in JoplinCVE-2025-24028Fix available7.8 High
- joplin project joplinDOM Clobbering leads to temporary DOS in the note viewer in JoplinCVE-2024-556303.3 Low
- joplin project joplinLack of validation on openExternal allows 1 click remote code execution in joplinCVE-2024-532687.3 High
- joplin project joplinRemote Code Execution on click of <a> Link in markdown previewCVE-2024-49362Fix available7.7 High
- joplin project joplinJoplin has a parsing error leading to Cross-site Scripting (XSS)CVE-2024-406439.7 Critical
- joplin project joplinSafe mode Cross-site Scripting (XSS) vulnerability in JoplinCVE-2023-378988.2 High
- joplin project joplinCross-site Scripting (XSS) when pasting HTML into the rich text editor in JoplinCVE-2023-385068.2 High
- joplin project joplinCross site scripting (XSS) when clicking on an untrusted `<map>` link in JoplinCVE-2023-395178.2 High
- joplin project joplinArbitrary code execution on click of PDF links in JoplinCVE-2023-456738.9 High