Skip to contentStreetwriters Notesnook vulnerabilities
- streetwriters notesnook, notesnook desktop, notesnook mobile +2 moreNotesnook: RCE via stored XSS in note export renderingCVE-2026-420909.6 Critical
- streetwriters notesnook, notesnook mobile +1 moreNotesnook: Stored XSS in mobile share editor via unescaped web clip title metadataCVE-2026-339785.4 Medium
- streetwriters notesnook web/desktop, notesnook desktop +1 moreNotesnook vulnerable to RCE via stored XSS in Note History diff viewerCVE-2026-339558.6 High
- streetwriters notesnook ios/android, notesnook web/desktop, notesnook desktop +1 more +3 moreNotesnook vulnerable to RCE via stored XSS in Web Clipper renderingCVE-2026-339769.7 Critical
- streetwriters notesnook, notesnook desktop, notesnook mobile +2 moreNotesnook has Stored XSS via unsanitized Twitter/X embed URL in editor (`tweetToEmbed`)CVE-2026-318765.4 Medium