Skip to content
OpenAdvisories

Package · npm

joplin

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.0
    CVE-2022-35131 Public exploit

    Joplin is vulnerable to arbitrary code execution

    Joplin v2.8.8 allows attackers to execute arbitrary commands via a crafted payload injected into the Node titles.

    joplin npm
  • Critical 9.8
    CVE-2022-23340

    Joplin Vulnerable to Code Injection

    Joplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results.

    joplin npm