Streetwriters vulnerabilities

Products

• Notesnook Desktop 4
• Notesnook Mobile 4
• Notesnook 3
• Notesnook Web/desktop 2

Newest

• streetwriters notesnook, notesnook desktop, notesnook mobile +2 more Notesnook: RCE via stored XSS in note export rendering CVE-2026-42090 9.6 CriticalMay 4, 2026
• streetwriters notesnook, notesnook mobile +1 more Notesnook: Stored XSS in mobile share editor via unescaped web clip title metadata CVE-2026-33978 5.4 MediumApril 1, 2026
• streetwriters notesnook web/desktop, notesnook desktop +1 more Notesnook vulnerable to RCE via stored XSS in Note History diff viewer CVE-2026-33955 8.6 HighMarch 27, 2026
• streetwriters notesnook ios/android, notesnook web/desktop, notesnook desktop +1 more +3 more Notesnook vulnerable to RCE via stored XSS in Web Clipper rendering CVE-2026-33976 9.7 CriticalMarch 27, 2026
• streetwriters notesnook, notesnook desktop, notesnook mobile +2 more Notesnook has Stored XSS via unsanitized Twitter/X embed URL in editor (`tweetToEmbed`) CVE-2026-31876 5.4 MediumMarch 11, 2026