Skip to content
OpenAdvisories

Package · npm

@joplin/onenote-converter

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.2
    CVE-2026-22810

    Joplin: Path traversal in OneNote importer allows overwriting arbitrary files

    Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions prior to 3.5.7 contain a path traversal vulnerability in the importer which allows overwriting arbitrary files on disk. The OneNote converter do…

    laurent22 joplin @joplin/onenote-converter npm