Notesnook Web/Desktop vulnerabilities

2 known vulnerabilities in Notesnook Web/Desktop from Streetwriters. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.6 Critical severity

  Notesnook Web/Desktop: Improper Neutralization of Input During Web Page Generation

  CVE-2026-33976Mar 27, 2026Streetwriters

  Notesnook is a note-taking app. Prior to version 3.3.11 on Web/Desktop and 3.3.17 on Android/iOS, a stored XSS in the Web Clipper rendering flow can be escalated to remote code execution in the desktop app. The root cause is that the clipper preserves attacker

• 8.6 High severity

  Notesnook Web/Desktop: Improper Neutralization of Input During Web Page Generation

  CVE-2026-33955Mar 27, 2026Streetwriters

  Notesnook is a note-taking app. Prior to version 3.3.11 on Web/Desktop, a cross-site scripting vulnerability stored in the note history comparison viewer can escalate to remote code execution in a desktop application. The issue is triggered when an attacker-co