Vulnerabilities in laurent22
30 resultsCVE-2026-34600MEDIUMJoplin Server delta API returns note content after share access is revokedEPSS 0.3%CVE-2026-55179MEDIUMJoplin: Logic error in Joplin Server allows a signed-in user to read any note from its internal server IDEPSS 0.3%CVE-2026-105784MEDIUMJoplin whiteboard card rendering allows CSS injection into application chromeEPSS 0.2%CVE-2026-59815MEDIUMJoplin: Pending share recipients can write items into shared folders before accepting invitationsEPSS 0.2%CVE-2026-105785MEDIUMJoplin Server password reset accepts tokens issued for unrelated purposesEPSS 0.2%CVE-2026-22810HIGHJoplin: Path traversal in OneNote importer allows overwriting arbitrary filesEPSS 0.2%CVE-2026-49449LOWJoplin: KaTeX `trust:true` enables URL-allowlist bypass leading to NTLMv2 credential theft via UNC path on WindowsEPSS 0.2%CVE-2026-49450HIGHJoplin desktop Windows auto-updater accepts signed installer from any publisher because app-update.yml has no publisherNameEPSS 0.2%CVE-2025-57798MEDIUMJoplin has Denial of Service (DoS) via Uncontrolled Resource Allocation through Title InputEPSS 0.2%CVE-2026-105783HIGHJoplin Web Clipper pairing allows cross-origin theft of a permanent API tokenEPSS 0.1%