Skip to content
OpenAdvisories

Product · codexu

NoteGen

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.6
    CVE-2026-111935

    NoteGen through 0.38.3 Local File Disclosure via Chat Image Analysis

    NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced sourceUrl paths. Attackers with write access to the victim's sync target can plant abs…

    codexu NoteGen