Many Notes vulnerabilities

1 known vulnerability in Many Notes from Brufdev. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.6 Critical severity

  many-notes: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-54053Sep 17, 2026Brufdev

  Many Notes is a Markdown note-taking web application designed for simplicity. Prior to 0.16.0, the ZIP vault import implemented in app/Actions/ProcessImportedVault.php accepts archive filenames containing parent-directory traversal segments. An authenticated u