CVE Tools
Track your stack

Laurent22

15 CVEs tracked since 2024. Since Jun 2024, none of them reached CISA KEV.

Laurent22 CVEs per month

Jun 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Laurent22 CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2024-0640
2024-074 or fewer
2024-084 or fewer
2024-093 or fewer
2024-104 or fewer
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-09110
2026-106 or fewer

Products

The products that kept showing up in Laurent22's monthly top three, with their CVEs summed over those months.

  1. Joplin152 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Laurent22.

  1. CVE-2026-105786Joplin: Unauthenticated account takeover via an attacker-chosen application-authorisation identifier—
  2. CVE-2026-105785Joplin Server password reset accepts tokens issued for unrelated purposes4.8
  3. CVE-2026-105784Joplin whiteboard card rendering allows CSS injection into application chrome4.6
  4. CVE-2026-105783Joplin Web Clipper pairing allows cross-origin theft of a permanent API token8.0
  5. CVE-2026-46650Joplin: Stored XSS in public share viewer via javascript: URL bypass in isAcceptedUrl4.4
  6. CVE-2026-59815Joplin: Pending share recipients can write items into shared folders before accepting invitations4.3
  7. CVE-2026-55210Joplin: SAML SSO account takeover via email-based account linking (missing is_external check in ssoLogin)7.4
  8. CVE-2026-59814Joplin: Stored XSS via inline-served note attachment on published shares7.6
  9. CVE-2026-55105Joplin: Fountain embeds allow arbitrary script execution in published notes and the note viewer7.7
  10. CVE-2026-46649Joplin: SSO Auth Code Login Missing Rate Limiting — 9-Digit Numeric Code Brute-Forceable via Unprotected Endpoint—
  11. CVE-2026-55179Joplin: Logic error in Joplin Server allows a signed-in user to read any note from its internal server ID6.5
  12. CVE-2026-59816Joplin: Path traversal in transcribe proxy endpoint via URL-encoded slash4.3
  13. CVE-2026-49449Joplin: KaTeX `trust:true` enables URL-allowlist bypass leading to NTLMv2 credential theft via UNC path on Windows2.5
  14. CVE-2026-49453Joplin: Path traversal in resource sync — silent arbitrary file write outside the resource directory7.0
  15. CVE-2026-49450Joplin desktop Windows auto-updater accepts signed installer from any publisher because app-update.yml has no publisherName7.1

The record

Peak rank
#158 in Sep 2026
Busiest month shown
Sep 2026, 11 CVEs
Months with a KEV entry
0 since Jun 2024
Monthly snapshots
2 since 2024
Laurent22's full record, month by month