codexu NoteGen

• CVE-2026-111935 Low 2.6 NoteGen through 0.38.3 Local File Disclosure via Chat Image Analysis 0.3%
• CVE-2026-17497 High 8.3 NoteGen arbitrary OS command execution via Tauri shell:allow-execute for bash/python 0.7%
• CVE-2026-17496 High 8.1 NoteGen chat preview XSS via unsanitized AI/skill HTML rendering 0.5%