Skip to contentStreetwriters Notesnook Mobile vulnerabilities
- streetwriters notesnook, notesnook desktop, notesnook mobile +2 moreNotesnook: RCE via stored XSS in note export renderingCVE-2026-420909.6 Critical
- streetwriters notesnook, notesnook mobile +1 moreNotesnook: Stored XSS in mobile share editor via unescaped web clip title metadataCVE-2026-339785.4 Medium
- streetwriters notesnook ios/android, notesnook web/desktop, notesnook desktop +1 more +3 moreNotesnook vulnerable to RCE via stored XSS in Web Clipper renderingCVE-2026-339769.7 Critical
- streetwriters notesnook, notesnook desktop, notesnook mobile +2 moreNotesnook has Stored XSS via unsanitized Twitter/X embed URL in editor (`tweetToEmbed`)CVE-2026-318765.4 Medium