Vulnerabilities in laurent22

26 results
Vexday analysis

Laurent22 apresenta um portfólio modesto de 15 vulnerabilidades, com apenas 1 classificada como crítica e nenhuma sob exploração ativa conhecida, reduzindo o risco imediato. A fraqueza dominante é Cross-Site Scripting (CWE-79), típica de aplicações web, enquanto 3 vulnerabilidades publicadas nos últimos 90 dias indicam atividade de descoberta contínua que requer monitoramento.

CVE-2026-55179MEDIUMJoplin: Logic error in Joplin Server allows a signed-in user to read any note from its internal server IDEPSS 0.3%CVE-2026-59815MEDIUMJoplin: Pending share recipients can write items into shared folders before accepting invitationsEPSS 0.2%CVE-2026-22810HIGHJoplin: Path traversal in OneNote importer allows overwriting arbitrary filesEPSS 0.2%CVE-2026-49450HIGHJoplin desktop Windows auto-updater accepts signed installer from any publisher because app-update.yml has no publisherNameEPSS 0.2%CVE-2026-49449LOWJoplin: KaTeX `trust:true` enables URL-allowlist bypass leading to NTLMv2 credential theft via UNC path on WindowsEPSS 0.2%CVE-2025-57798MEDIUMJoplin has Denial of Service (DoS) via Uncontrolled Resource Allocation through Title InputEPSS 0.2%