Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-40643
9.6
CRITICALCVSS v3
Published
September 9, 2024
Affected
4 projects
Assigned by
GitHub
Severity scale
010
Description
Joplin is a free, open source note taking and to-do application. Joplin fails to take into account that "<" followed by a non letter character will not be considered html. As such it is possible to do an XSS by putting an "illegal" tag within a tag.
laurent22/joplin
GitHubJoplin - the privacy-focused note taking app with sync capabilities for Windows, macOS, Linux, Android and iOS.
GitHubJoplin - the privacy-focused note taking app with sync capabilities for Windows, macOS, Linux, Android and iOS.< 3.0.15NVD
Joplin
ChocolateyNote-taking and to-do application with synchronization capabilities for Windows, macOS, Linux, Android and iOS.
ChocolateyNote-taking and to-do application with synchronization capabilities for Windows, macOS, Linux, Android and iOS.< 3.0.15NVD
NPM
RubyGems