Log in Start free

streetwriters

Products

ProductCVEsExploitedLatest
notesnook3–May 4, 2026
Notesnook Web/Desktop2–Mar 27, 2026
Notesnook iOS/Android1–Mar 27, 2026

Exploited and recent CVEs

  • CVE-2026-42090 Critical 9.6 Notesnook: RCE via stored XSS in note export rendering 0.5%
  • CVE-2026-33978 Medium 5.4 Notesnook: Stored XSS in mobile share editor via unescaped web clip title metadata 0.3%
  • CVE-2026-33955 High 8.6 Notesnook vulnerable to RCE via stored XSS in Note History diff viewer 0.4%
  • CVE-2026-33976 Critical 9.7 Notesnook vulnerable to RCE via stored XSS in Web Clipper rendering 0.7%
  • CVE-2026-33976 Critical 9.7 Notesnook vulnerable to RCE via stored XSS in Web Clipper rendering 0.7%
  • CVE-2026-31876 Medium 5.4 Notesnook has Stored XSS via unsanitized Twitter/X embed URL in editor (`tweetToEmbed`) 0.2%