Skip to content
OpenAdvisories

Package · npm

joplin

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.0
    CVE-2022-35131 Public exploit

    Joplin is vulnerable to arbitrary code execution

    Joplin v2.8.8 allows attackers to execute arbitrary commands via a crafted payload injected into the Node titles.

    joplin npm
  • Medium 6.1
    CVE-2020-28249 Public exploit

    Cross-site scripting in Joplin

    Joplin 1.2.6 for Desktop allows XSS via a LINK element in a note.

    joplin npm
  • Medium 6.1
    CVE-2020-15930 Public exploit

    Cross-site Scripting in Joplin

    An XSS issue in Joplin desktop 1.0.190 to 1.0.245 allows arbitrary code execution via a malicious HTML embed tag.

    joplin npm
  • Medium 5.4
    CVE-2020-9038 Public exploit

    Cross-site Scripting in Joplin

    Joplin through 1.0.184 allows Arbitrary File Read via XSS.

    joplin npm