https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 02:40:53 +0000 https://vulnerability.circl.lu/vuln/cve-2022-40277 <p><strong>Affected:</strong> Joplin</p> <p>Joplin version 2.8.8 allows an external attacker to execute arbitrary commands remotely on any client that opens a link in a malicious markdown file, via Joplin. This is possible because the application does not properly validate the schema/protocol of existing links in the markdown file before passing them to the &#39;shell.openExternal&#39; function.</p> <p><strong>Affected:</strong> Joplin</p> <p>Joplin version 2.8.8 allows an external attacker to execute arbitrary commands remotely on any client that opens a link in a malicious markdown file, via Joplin. This is possible because the application does not properly validate the schema/protocol of existing links in the markdown file before passing them to the &#39;shell.openExternal&#39; function.</p> https://vulnerability.circl.lu/vuln/cve-2022-40277 https://vulnerability.circl.lu/vuln/ghsa-mjr5-v9c9-mm7g <p><strong>Affected:</strong> npm: joplin</p> <p>Joplin version 2.8.8 allows an external attacker to execute arbitrary commands remotely on any client that opens a link in a malicious markdown file, via Joplin. This is possible because the application does not properly validate the schema/protocol of existing links in the markdown file before passing them to the `shell.openExternal` function.</p> <p><strong>Affected:</strong> npm: joplin</p> <p>Joplin version 2.8.8 allows an external attacker to execute arbitrary commands remotely on any client that opens a link in a malicious markdown file, via Joplin. This is possible because the application does not properly validate the schema/protocol of existing links in the markdown file before passing them to the `shell.openExternal` function.</p> https://vulnerability.circl.lu/vuln/ghsa-mjr5-v9c9-mm7g