Advisories · Technology
Open Notebook.
Every CVE that names Open Notebook among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.2 High
Arbitrary File Read via Local File Inclusion (LFI)
- Open Notebook
- CWE-20
- CVSS 7.0 High
Arbitrary File Write Through Path Traversal
- Open Notebook
- CWE-20
- CVSS 9.2 CriticalCritical · CVSS 9+
Remote Code Execution (RCE) via Server-Side Template Injection (SSTI)
- Open Notebook
- CWE-20
- CVSS 8.7 High
SurrealDB Injection on Open Notebook
- Open Notebook
- Cross-site request forgery (CSRF)
- Code injection