Skip to content
OpenAdvisories

Vendor

brufdev

1 known vulnerabilities.

Products

many-notes 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.6
    CVE-2026-54053

    Many Notes: Path Traversal via ZIP import allows arbitrary file write and stored XSS in other users' vaults

    Many Notes is a Markdown note-taking web application designed for simplicity. Prior to 0.16.0, the ZIP vault import implemented in app/Actions/ProcessImportedVault.php accepts archive filenames containing parent-directory traversal segments. An authenticated …

    brufdev many-notes