Repository navigation
Security: timothepoznanski/poznote
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Open redirect in the login.php flow and allowed `javascript:` protocolGHSA-97jp-22c4-24px published
Sep 21, 2026 by timothepoznanskiLow -
Stored XSS on imported notesGHSA-xjh4-q36h-mcvv published
Sep 9, 2026 by timothepoznanskiHigh -
Stored XSS via SVG attachment uploadGHSA-m44h-mv9f-38x3 published
Sep 3, 2026 by timothepoznanskiHigh -
Stored XSS via escaped-iframe re-unescape — raw attribute passthrough in unescapeIframesInHtmlGHSA-4j6w-6478-cg7j published
Aug 30, 2026 by timothepoznanskiHigh -
Stored XSS via guest markdown task-write — sanitizer omitted on public task pathsGHSA-vv49-2463-g2gj published
Aug 30, 2026 by timothepoznanskiHigh -
Remote code execution through restore / import fontionnalityGHSA-rmm5-6582-qcmc published
Aug 30, 2026 by timothepoznanskiCritical -
Stored XSS through attachment filenameGHSA-33wr-rw77-83cj published
Aug 30, 2026 by timothepoznanskiModerate -
Stored XSSGHSA-r45x-r86q-2p3x published
Jun 21, 2026 by timothepoznanskiHigh -
authenticated arbitrary-file-upload Remote Code ExecutionGHSA-3v39-q26w-c3h7 published
Jun 18, 2026 by timothepoznanskiCritical
Learn more about advisories related to timothepoznanski/poznote in the GitHub Advisory Database