BoostIO/BoostNote-Legacy
GitHub
Releases100
Frequency2 weeks 5 days
Last Release
Stars16.9K
This repository is outdated and new Boost Note app is available! We've launched a new Boost Note app which supports real-time collaborative writing. https://github.com/BoostIO/BoostNote-App
CVE History
| CVE | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|
| 5.4 MEDIUM | 3.5 LOW | ||
In Boostnote 0.12.1, exporting to PDF contains opportunities for XSS attacks. | |||
| — | 3.5 LOW | ||
There is XSS in BoostIO Boostnote 0.11.15 via a label named mermaid, as demonstrated by a crafted SRC attribute of an IFRAME element. | |||
| — | 4.3 MEDIUM | ||
Boostnote v0.11.7 allows XSS during highlighting of Markdown text, as demonstrated by an onerror attribute of an IMG element. | |||