Security
فارسی
All products

github.com/enchant97/note-mark/backend

Go · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Note Mark: Path traversal via unsanitized book/note slug in migrate export (sibling of GHSA-g49p)CVE-2026-50553 · GHSA-RQRH-8WPV-X7HHVersion ranges need review. github.com/enchant97/note-mark/backend Go High Fix reported
Note Mark: Unauthenticated disclosure of soft-deleted note metadata via deleted=true on public booksCVE-2026-50554 · GHSA-588F-FVCV-XHVFVersion ranges need review. github.com/enchant97/note-mark/backend Go Medium Fix reported
Note Mark has Broken Access Control on Asset DownloadCVE-2026-40265 · GHSA-P5W6-75F9-CC2PVersion ranges need review. github.com/enchant97/note-mark/backend Go Medium Fix reported
Note Mark: OIDC-registered users authenticated by submitting password "null"CVE-2026-41571 · GHSA-PXF8-6WQM-R6HHVersion ranges need review. github.com/enchant97/note-mark/backend Go Critical Fix reported
Note Mark: Username Enumeration via Login Endpoint Timing Side-ChannelCVE-2026-40263 · GHSA-W6M9-39CV-2FWPVersion ranges need review. github.com/enchant97/note-mark/backend Go Low Fix reported
Note Mark has a JWT Secret Weakness that allows Full Account Takeover via Token ForgeryCVE-2026-44523 · GHSA-Q6MH-RQWH-G786Version ranges need review. github.com/enchant97/note-mark/backend Go Critical Fix reported
Note Mark: Arbitrary File Write via Path Traversal in Asset Names Leads to Remote Code ExecutionCVE-2026-44522 · GHSA-G49P-4QXJ-88V3Version ranges need review. github.com/enchant97/note-mark/backend Go High Fix reported
Note Mark has Stored XSS via Unrestricted Asset UploadCVE-2026-40262 · GHSA-9PR4-RF97-79QHVersion ranges need review. github.com/enchant97/note-mark/backend Go High Fix reported
Note Mark: Unauthenticated read of notes and assets in soft-deleted public booksCVE-2026-41572 · GHSA-3GR9-485J-V4XFVersion ranges need review. github.com/enchant97/note-mark/backend Go Medium Fix reported