CVE ID :CVE-2026-105783 Published : Oct. 6, 2026, 12:16 a.m. | 1 hour, 11 minutes ago Description :Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.13, when Joplin Desktop is running with the opt-in Web Clipper server...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-105783 - Joplin Web Clipper pairing allows cross-origin theft of a permanent API token

VERWANDTEARTIKEL

CVE-2026-105786 - Joplin: Unauthenticated account takeover via an attacker-chosen application-authorisation identifier

CVE-2026-105762 - Dify: Unauthenticated Server-Side Request Forgery in /console/api/remote-files/upload endpoint

CVE-2026-105763 - Twenty: Plaintext IMAP/SMTP/CalDAV password disclosure to any workspace member via /metadata GraphQL

CVE-2026-42589

CVE-2026-104852 - GraphQL Tools has prototype pollution in well-established utility function `mergeDeep`

CVE-2026-21589 - Atlassian Data Center and Server Arbitrary File Access Vulnerability