Notesnook Mobile vulnerabilities

2 known vulnerabilities in Notesnook Mobile from Streetwriters. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.6 Critical severity

  notesnook: Improper Neutralization of Input During Web Page Generation

  CVE-2026-42090May 4, 2026Streetwriters

  Notesnook is a note-taking app focused on user privacy & ease of use. Prior to Notesnook Web/Desktop version 3.3.15 and prior to Notesnook iOS/Android version 3.3.20, a stored XSS vulnerability in the note export flow can be escalated to remote code execution

• 9.6 Critical severity

  Notesnook Web/Desktop: Improper Neutralization of Input During Web Page Generation

  CVE-2026-33976Mar 27, 2026Streetwriters

  Notesnook is a note-taking app. Prior to version 3.3.11 on Web/Desktop and 3.3.17 on Android/iOS, a stored XSS in the Web Clipper rendering flow can be escalated to remote code execution in the desktop app. The root cause is that the clipper preserves attacker