Note Mark: Unauthenticated read of notes and assets in soft-deleted public books
Modified: 6/25/2026
package
pkg:go/github.com/enchant97/note-mark/backend
Note Mark: Unauthenticated read of notes and assets in soft-deleted public books
Modified: 6/25/2026
Note Mark: Unauthenticated disclosure of soft-deleted note metadata via deleted=true on public books
Modified: 7/21/2026
Note Mark has Stored XSS via Unrestricted Asset Upload
Modified: 6/25/2026
Note Mark: Arbitrary File Write via Path Traversal in Asset Names Leads to Remote Code Execution
Modified: 6/25/2026
Note Mark has Broken Access Control on Asset Download
Modified: 6/25/2026
Note Mark: OIDC-registered users authenticated by submitting password "null"
Modified: 6/25/2026
Note Mark has a JWT Secret Weakness that allows Full Account Takeover via Token Forgery
Modified: 6/25/2026
Note Mark: Path traversal via unsanitized book/note slug in migrate export (sibling of GHSA-g49p)
Modified: 7/21/2026
Note Mark: Username Enumeration via Login Endpoint Timing Side-Channel
Modified: 6/25/2026
Note Mark: Username Enumeration via Login Endpoint Timing Side-Channel in github.com/enchant97/note-mark/backend
Modified: 6/25/2026
Note Mark: Unauthenticated read of notes and assets in soft-deleted public books in github.com/enchant97/note-mark/backend
Modified: 6/25/2026
Note Mark has Stored XSS via Unrestricted Asset Upload in github.com/enchant97/note-mark/backend
Modified: 6/25/2026
Note Mark: Arbitrary File Write via Path Traversal in Asset Names Leads to Remote Code Execution in github.com/enchant97/note-mark/backend
Modified: 6/25/2026
Note Mark has Broken Access Control on Asset Download in github.com/enchant97/note-mark/backend
Modified: 6/25/2026
Note Mark: OIDC-registered users authenticated by submitting password "null" in github.com/enchant97/note-mark/backend
Modified: 6/25/2026
Note Mark has a JWT Secret Weakness that allows Full Account Takeover via Token Forgery in github.com/enchant97/note-mark/backend
Modified: 6/25/2026
Note Mark: Unauthenticated disclosure of soft-deleted note metadata via deleted=true on public books in github.com/enchant97/note-mark/backend
Modified: 7/21/2026
Note Mark: Path traversal via unsanitized book/note slug in migrate export (sibling of GHSA-g49p) in github.com/enchant97/note-mark/backend
Modified: 7/21/2026