Skip to content
OpenAdvisories

Package · npm

joplin

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.7
    CVE-2024-49362

    Remote Code Execution on click of <a> Link in markdown preview

    Joplin is a free, open source note taking and to-do application. Joplin-desktop has a vulnerability that leads to remote code execution (RCE) when a user clicks on an <a> link within untrusted notes. The issue arises due to insufficient sanitization of <a> ta…

    laurent22 joplin joplin npm
  • High 7.8
    CVE-2022-40277

    Joplin Remote Code Execution

    Joplin version 2.8.8 allows an external attacker to execute arbitrary commands remotely on any client that opens a link in a malicious markdown file, via Joplin. This is possible because the application does not properly validate the schema/protocol of existi…

    joplin npm