Approved changes feed: RSS · Atom
cpe:2.3:a:notegen:notegen:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Notegen (5218ab36-9d35-5303-9044-1aea75978eaa) |
|---|---|
| Product | Notegen (cc395e35-a091-5f6a-ac80-e72be676319d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-111935 |
vulnerable | 2026-11-03 10:16:10.715052 |
NoteGen through 0.38.3 Local File Disclosure via Chat Image Analysis
LOW (2.6)
NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced sourceUrl paths. Attackers with write access to the victim's sync target can plant absolute paths or file:// URLs, causing image_inspect to send local images to the AI provider.
Published: 2026-10-19T13:55:09.563Z
Updated: 2026-10-19T18:58:39.107Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.