fccview/jotty

Releases58

Frequency4 days 22 hours

Last Release 24 days ago

Stars1.88K

Lightweight but powerful alternative for managing your personal, file based, notes and checklists.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2026-42564 ↗	May 11, 2026Monday, 11 May 2026, 22:22	8.2 HIGH	—
jotty·page is a self-hosted app for your checklists and notes. Prior to 1.22.0, an unauthenticated path traversal vulnerability exists in /api/app-icons/[filename]. The filename route parameter is joined into a filesystem path without traversal/boundary validation, allowing file reads outside data/uploads/app-icons/. This vulnerability is fixed in 1.22.0.