Streetwriters vulnerabilities
We track 3 vulnerabilities in Streetwriters products across 5 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 4, 2026.
Latest Streetwriters vulnerabilities
- 9.6 Critical severity
notesnook: Improper Neutralization of Input During Web Page Generation
Notesnook is a note-taking app focused on user privacy & ease of use. Prior to Notesnook Web/Desktop version 3.3.15 and prior to Notesnook iOS/Android version 3.3.20, a stored XSS vulnerability in the note export flow can be escalated to remote code execution
- 9.6 Critical severity
Notesnook Web/Desktop: Improper Neutralization of Input During Web Page Generation
Notesnook is a note-taking app. Prior to version 3.3.11 on Web/Desktop and 3.3.17 on Android/iOS, a stored XSS in the Web Clipper rendering flow can be escalated to remote code execution in the desktop app. The root cause is that the clipper preserves attacker
- 8.6 High severity
Notesnook Web/Desktop: Improper Neutralization of Input During Web Page Generation
Notesnook is a note-taking app. Prior to version 3.3.11 on Web/Desktop, a cross-site scripting vulnerability stored in the note history comparison viewer can escalate to remote code execution in a desktop application. The issue is triggered when an attacker-co