Advisories · Technology
codexu NoteGen.
Every CVE that names codexu NoteGen among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.1 Low
NoteGen through 0.38.3 Local File Disclosure via Chat Image Analysis
- codexu NoteGen
- Path traversal
- CVSS 8.3 High
NoteGen arbitrary OS command execution via Tauri shell:allow-execute for bash/python
- codexu NoteGen
- Command injection
- Broken access control
- CVSS 8.1 High
NoteGen chat preview XSS via unsanitized AI/skill HTML rendering
- codexu NoteGen
- Cross-site scripting (XSS)