NotepadNext vulnerabilities

2 known vulnerabilities in NotepadNext from Dail8859. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  NotepadNext: Improper Control of Generation of Code

  CVE-2026-42214May 7, 2026Dail8859

  Notepad Next is a cross-platform, reimplementation of Notepad++. Prior to version 0.14, NotepadNext's detectLanguageFromExtension() function interpolates a file's extension directly into a Lua script without sanitization. An attacker can craft a filename whose

• 9.4 Critical severity

  NotepadNext: Out-of-bounds Write

  CVE-2025-52939Jun 23, 2025Dail8859

  Out-of-bounds Write vulnerability in dail8859 NotepadNext (src/lua/src modules). This vulnerability is associated with program files ldebug.C, lvm.C. This issue affects NotepadNext: through v0.11.