Notable - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2022-04-15.

Products

• Notable - 3 CVEs

Newest CVEs of Notable

• CVE-2022-29281 - CVSS 8.8 (high), 2022-04-15: Notable before 1.9.0-beta.8 doesn't effectively prevent the opening of executable files when clicking on a link. There is improper validation of the file URI…
• CVE-2022-26198 - CVSS 9.8 (critical), 2022-03-27: Notable v1.8.4 does not filter text editing, allowing attackers to execute arbitrary code via a crafted payload injected into the Title text field.
• CVE-2020-16608 - CVSS 9.6 (critical), 2020-12-10: Notable 1.8.4 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferences is true).