← Back

Boostnote

boostnote

Vendor: Boostnote • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-41392
1Boostnote
1Boostnote
Jun 17, 2026
Sep 17, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
static/main-preload.js in Boost Note through 0.22.0 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openE...Show more
static/main-preload.js in Boost Note through 0.22.0 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal Electron API.Show less
CVE-2018-13433
1Boostnote
1Boostnote
Nov 21, 2024
Jul 8, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Boostnote v0.11.7 allows XSS during highlighting of Markdown text, as demonstrated by an onerror attribute of an IMG element.