Product by Streetwriters
Notesnook
3 known vulnerabilities in Notesnook (Streetwriters), 0 of them actively exploited (CISA KEV).
Key figures
3
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-42090 | Notesnook: RCE via stored XSS in note export rendering | 9.6 | |
| Medium | CVE-2026-33978 | Notesnook: Stored XSS in mobile share editor via unescaped web clip title metadata | 6.1 | |
| Medium | CVE-2026-31876 | Notesnook has Stored XSS via unsanitized Twitter/X embed URL in editor (`tweetToEmbed`) | 5.4 |