Skip to content
OpenAdvisories

Vendor

lfnovo

1 known vulnerabilities.

Products

open-notebook 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2026-90769

    Open Notebook before 1.11.0 Server-Side Request Forgery via link-source

    Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network serv…

    lfnovo open-notebook