https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 21:56:39 +0000 https://cve.radiocsirt.org/vuln/brew-joplin-cli-cve-2022-40277 <p><strong>Affected:</strong> Homebrew: joplin-cli</p> <p>Joplin version 2.8.8 allows an external attacker to execute arbitrary commands remotely on any client that opens a link in a malicious markdown file, via Joplin. This is possible because the application does not properly validate the schema/protocol of existing links in the markdown file before passing them to the `shell.openExternal` function.</p> <p><strong>Affected:</strong> Homebrew: joplin-cli</p> <p>Joplin version 2.8.8 allows an external attacker to execute arbitrary commands remotely on any client that opens a link in a malicious markdown file, via Joplin. This is possible because the application does not properly validate the schema/protocol of existing links in the markdown file before passing them to the `shell.openExternal` function.</p> https://cve.radiocsirt.org/vuln/brew-joplin-cli-cve-2022-40277 https://cve.radiocsirt.org/vuln/euvd-2026-240395 EUVD-2026-240395 https://cve.radiocsirt.org/vuln/euvd-2026-240395 https://cve.radiocsirt.org/vuln/fkie_cve-2022-40277 <p>Joplin version 2.8.8 allows an external attacker to execute arbitrary commands remotely on any client that opens a link in a malicious markdown file, via Joplin. This is possible because the application does not properly validate the schema/protocol of existing links in the markdown file before passing them to the &#39;shell.openExternal&#39; function.</p> <p>Joplin version 2.8.8 allows an external attacker to execute arbitrary commands remotely on any client that opens a link in a malicious markdown file, via Joplin. This is possible because the application does not properly validate the schema/protocol of existing links in the markdown file before passing them to the &#39;shell.openExternal&#39; function.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-40277 https://cve.radiocsirt.org/vuln/ghsa-mjr5-v9c9-mm7g <p><strong>Affected:</strong> npm: joplin</p> <p>Joplin version 2.8.8 allows an external attacker to execute arbitrary commands remotely on any client that opens a link in a malicious markdown file, via Joplin. This is possible because the application does not properly validate the schema/protocol of existing links in the markdown file before passing them to the `shell.openExternal` function.</p> <p><strong>Affected:</strong> npm: joplin</p> <p>Joplin version 2.8.8 allows an external attacker to execute arbitrary commands remotely on any client that opens a link in a malicious markdown file, via Joplin. This is possible because the application does not properly validate the schema/protocol of existing links in the markdown file before passing them to the `shell.openExternal` function.</p> https://cve.radiocsirt.org/vuln/ghsa-mjr5-v9c9-mm7g https://cve.radiocsirt.org/vuln/gsd-2022-40277 gsd-2022-40277 https://cve.radiocsirt.org/vuln/gsd-2022-40277