vnote vulnerabilities
CVEs whose affected-version data names the vnote package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-86022High· 7.0PoCVNote is a note-taking platform
VNote is a note-taking platform. Prior to 4.3.0, SessionConfig::ExternalProgram::fetchCommand wraps a note path in double quotes and substitutes it into a command string that QProcess::start(const QString&) reparses into arguments throug…
▾ Midnightvnotex · vnoteEPSS 0.21%via NVD
CVE-2026-86016High· 8.2VNote is a note-taking platform
VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment `preNode.innerHTML = p_metaData` in src/data/extra/web/js/markdownit.js to insert YAML frontmatter metadata into a pre element before the protectFromXss sanitizat…
▾ Twilightvnotex · vnoteEPSS 0.22%via NVD