Vendor

    Streetwriters

    5 known vulnerabilities in products by Streetwriters, 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Streetwriters
    CriticalCVE-2026-33976

    Notesnook vulnerable to RCE via stored XSS in Web Clipper rendering

    		9.6
    CriticalCVE-2026-42090

    Notesnook: RCE via stored XSS in note export rendering

    		9.6
    HighCVE-2026-33955

    Notesnook vulnerable to RCE via stored XSS in Note History diff viewer

    		8.6
    MediumCVE-2026-33978

    Notesnook: Stored XSS in mobile share editor via unescaped web clip title metadata

    		6.1
    MediumCVE-2026-31876

    Notesnook has Stored XSS via unsanitized Twitter/X embed URL in editor (`tweetToEmbed`)

    		5.4

    News

    Products

    Products by Streetwriters
    Notesnook Mobile40
    Notesnook Web/Desktop40
    Notesnook30