Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 12:24:07 +0000 CVE-2024-55630 — DOM Clobbering leads to temporary DOS in the note viewer in Joplin https://cve.radiocsirt.org/vuln/cve-2024-55630 <p><strong>Affected:</strong> laurent22 joplin</p> <p>Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. Joplin&#39;s HTML sanitizer allows the `name` attribute to be specified. If `name` is set to the same value as an existing `document` property (e.g. `querySelector`), that property is replaced with the element. This vulnerability&#39;s only known impact is denial of service. The note viewer fails to refresh until closed and re-opened with a different note. This issue has been addressed in version 3.2.8 and all users are advised to upgrade. There are no known workarounds for this vulnerability.</p> <p><strong>Affected:</strong> laurent22 joplin</p> <p>Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. Joplin&#39;s HTML sanitizer allows the `name` attribute to be specified. If `name` is set to the same value as an existing `document` property (e.g. `querySelector`), that property is replaced with the element. This vulnerability&#39;s only known impact is denial of service. The note viewer fails to refresh until closed and re-opened with a different note. This issue has been addressed in version 3.2.8 and all users are advised to upgrade. There are no known workarounds for this vulnerability.</p> https://cve.radiocsirt.org/vuln/cve-2024-55630