Skip to content
OpenAdvisories

Vendor

laurent22

30 known vulnerabilities.

Products

joplin 30
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.5
    CVE-2026-49449

    Joplin: KaTeX `trust:true` enables URL-allowlist bypass leading to NTLMv2 credential theft via UNC path on Windows

    Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. From 1.4.0 until 3.7.2, packages/renderer/MdToHtml/rules/katex.ts enables KaTeX's trust option for note content, allowing a note author to place a \href …

    laurent22 joplin
  • Low 3.3
    CVE-2024-55630

    DOM Clobbering leads to temporary DOS in the note viewer in Joplin

    Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. Joplin's HTML sanitizer allows the `name` attribute to be specified. If `name` is set to the same value as an existing `documen…

    laurent22 joplin