MEDIUM6.1npm
GHSA-4jjv-p8x9-rrf7· CVE-2023-37299Joplin Cross-site Scripting vulnerability
Modified: 11/8/2023
package
npm/joplin
pkg:npm/joplin
MEDIUM5.4npm
GHSA-6r7x-hc8m-985r· CVE-2020-9038Cross-site Scripting in Joplin
Modified: 11/8/2023
MEDIUM6.1npm
GHSA-7grw-xfx6-qhx6· CVE-2023-37298Joplin Cross-site Scripting vulnerability
Modified: 11/8/2023
CRITICAL9.8npm
GHSA-8478-53pv-jxvm· CVE-2022-23340Joplin Vulnerable to Code Injection
Modified: 4/23/2024
MEDIUM6.1npm
GHSA-cgc7-mwp4-3ccx· CVE-2020-15930Cross-site Scripting in Joplin
Modified: 11/8/2023
MEDIUM5.4npm
GHSA-gjwp-7v3g-99pj· CVE-2021-23431, SNYK-JS-JOPLIN-1325537Cross-site Request Forgery (CSRF) in joplin
Modified: 9/10/2026
MEDIUM6.1npm
GHSA-h6c2-879r-jffh· CVE-2022-45598Joplin Desktop App vulnerable to Cross-site Scripting
Modified: 11/8/2023
HIGH7.7npm
GHSA-hff8-hjwv-j9q7· CVE-2024-49362Remote Code Execution on click of <a> Link in markdown preview
Modified: 1/30/2025
MEDIUM6.1npm
GHSA-m6mf-hmrh-ph4j· CVE-2018-1000534Joplin Vulnerable to Cross-site Scripting in Note Content
Modified: 4/23/2024
HIGH7.8npm
GHSA-mjr5-v9c9-mm7g· CVE-2022-40277Joplin Remote Code Execution
Modified: 4/23/2024
MEDIUM6.1npm
GHSA-mrmf-755g-w2vw· CVE-2021-37916Joplin vulnerable to Cross-site Scripting in notes
Modified: 4/23/2024
MEDIUM5.4npm
GHSA-phj8-2p6x-hq5r· CVE-2021-33295Joplin Cross Site Scripting Vulnerability via NOSCRIPT tags
Modified: 4/23/2024
MEDIUM6.1npm
GHSA-q26w-wjj2-22vv· CVE-2020-28249Cross-site scripting in Joplin
Modified: 11/8/2023
CRITICAL9.0npm
GHSA-ww2v-frv5-pj5x· CVE-2022-35131Joplin is vulnerable to arbitrary code execution
Modified: 11/8/2023