Description
An arbitrary file upload vulnerability in the attachment handling component of flatnotes v5.5.4 allows attackers to execute arbitrary code via uploading a crafted HTML or SVG file.
Critical · 9.8
CVE-2026-50873
EUVD-2026-36771GHSA-wv29-ggqw-p97w
An arbitrary file upload vulnerability in the attachment handling component of flatnotes v5.5.4 allows attackers to execute arbitrary code …
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by mitre