MEDIUM6.1

GHSA-q26w-wjj2-22vv

Cross-site scripting in Joplin

Quick fix

GHSA-q26w-wjj2-22vv — joplin: upgrade to the fixed version with the command below.

npm install joplin@1.3.11

Details

Joplin allows XSS via a LINK element in a note.

Are you affected?

Enter the version of the package you're using.

Affected packages

Introduced in: 0Fixed in: 1.3.11

Fixnpm install joplin@1.3.11

References