Notepad Next vulnerabilities

1 known vulnerability in Notepad Next from Dail8859. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  NotepadNext: Improper Control of Generation of Code

  CVE-2026-42214May 7, 2026Dail8859

  Notepad Next is a cross-platform, reimplementation of Notepad++. Prior to version 0.14, NotepadNext's detectLanguageFromExtension() function interpolates a file's extension directly into a Lua script without sanitization. An attacker can craft a filename whose