github.com/enchant97/note-mark/backend vulnerabilities
CVEs whose affected-version data names the github.com/enchant97/note-mark/backend package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-50553HighNote Mark is an open-source note-taking application
Note Mark is an open-source note-taking application. Prior to version 0.19.5, Note Mark validates book and note slug values with the OpenAPI/huma tag pattern:"[a-z0-9-]+". huma compiles this with regexp.MustCompile(s.Pattern) and tests i…
▾ Twilightenchant97 · github.com/enchant97/note-mark/backendEPSS 0.38%via NVD
CVE-2026-50554Medium· 5.3Note Mark is an open-source note-taking application
Note Mark is an open-source note-taking application. Prior to version 0.19.5, GET /api/books/{bookID}/notes is an unauthenticated endpoint that accepts a "deleted" query parameter. When the request is ?deleted=true, the service runs the …
▾ Sunlitenchant97 · github.com/enchant97/note-mark/backendEPSS 0.24%via NVD