Skip to content
OpenAdvisories
High WID-SEC-2026-1569 3 CVEs

Joplin: Mehrere Schwachstellen

Published May 17, 2026 · Updated May 19, 2026 · Revision 3 · de-DE

Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Joplin ausnutzen, um einen Denial of Service Angriff durchzuführen, vertrauliche Informationen offenzulegen oder beliebige Dateien zu überschreiben, was möglicherweise zur Ausführung von beliebigem Code führt.

Product

Joplin ist eine quelloffene Notiz- und Aufgabenverwaltungsanwendung.

Vulnerabilities 3

  • High 8.2
    CVE-2026-22810

    Joplin: Path traversal in OneNote importer allows overwriting arbitrary files

    Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions prior to 3.5.7 contain a path traversal vulnerability in the importer which allows overwriting arbitrary files on disk. The OneNote converter do…

    laurent22 joplin @joplin/onenote-converter npm
  • Medium 5.7
    CVE-2026-34600

    Joplin Server delta API returns note content after share access is revoked

    Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions 3.5.2 and prior contain a logic error in the delta API that allows share recipients to download notes that are no longer shared with them, relat…

    laurent22 joplin
  • Medium 5.5
    CVE-2025-57798

    Joplin has Denial of Service (DoS) via Uncontrolled Resource Allocation through Title Input

    Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions 3.6.14 and prior contain a Denial of Service (DoS) vulnerability in the title input functionality due to a lack of proper length validation. Thi…

    laurent22 joplin

Revision history

  1. #3

    Referenz(en) aufgenommen: EUVD-2025-209900, EUVD-2026-31001

  2. #2

    Referenz(en) aufgenommen: EUVD-2026-30806

  3. #1

    Initiale Fassung

References