Skip to content
OpenAdvisories

Vendor

streetwriters

5 known vulnerabilities.

Products

notesnook 3 Notesnook Web/Desktop 2 Notesnook iOS/Android 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-33978

    Notesnook: Stored XSS in mobile share editor via unescaped web clip title metadata

    Notesnook is a note-taking app focused on user privacy & ease of use. Prior to version 3.3.17, a stored XSS vulnerability exists in the mobile share / web clip flow because attacker-controlled clip metadata is concatenated into HTML without escaping and then …

    streetwriters notesnook
  • Medium 5.4
    CVE-2026-31876

    Notesnook has Stored XSS via unsanitized Twitter/X embed URL in editor (`tweetToEmbed`)

    Notesnook is a note-taking app focused on user privacy & ease of use. Prior to 3.3.9, a Stored Cross-Site Scripting (XSS) vulnerability existed in Notesnook's editor embed component when rendering Twitter/X embed URLs. The tweetToEmbed() function in component…

    streetwriters notesnook