Skip to content
OpenAdvisories

Product · Readwise

Reader

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-18311

    CVE-2026-18311

    Readwise Reader for Android contains a cross-site scripting vulnerability due to missing HTML sanitization in its processing of imported document metadata. Attacker-controlled fields such as the author meta tag are inserted into a WebView via innerHTML, enabl…

    Readwise Reader
  • Medium 6.1
    CVE-2026-18320

    CVE-2026-18320

    Readwise Reader for Android uses a sanitize-html configuration that permits all attributes on SVG and PATH elements due to a wildcard attribute rule. This configuration fails to remove script-capable attributes such as event handlers (e.g., 'onload', 'onerror…

    Readwise Reader
  • Medium 6.1
    CVE-2026-18312

    CVE-2026-18312

    Readwise Reader for Android constructs URLs in its WebView using attacker-controlled metadata without proper encoding or escaping. The application interpolates untrusted values directly into URL strings and inserts them into the DOM via innerHTML. Because the…

    Readwise Reader