Back to Catalog
Note Mark logo

Note Mark

Fast, minimal, self-hosted Markdown notes app

app

Alternative to: notion, obsidian, evernote

Repository Docs
About Versions (48)
Back to Versions

v0.19.2

2026-04-11

⛔ Security Fixes ⛔

  • Stored XSS via Unrestricted Asset Upload (CVE-2026-40262) - GHSA-9pr4-rf97-79qh
  • Broken Access Control on Asset Download (CVE-2026-40265) - GHSA-p5w6-75f9-cc2p
  • Username Enumeration via Login Endpoint by CWE-208 (CVE-2026-40263) - GHSA-w6m9-39cv-2fwp

Thanks to @QiaoNPC for reporting these.

Changes

Fixed

  • Stored XSS via Unrestricted Asset Upload (CVE-2026-40262)
  • Broken Access Control on Asset Download (CVE-2026-40265)
  • Username Enumeration via Login Endpoint by CWE-208 (CVE-2026-40263)

Changed

  • bump deps

Removed

  • liquid parser from render (it was unused, since disabled)

Full Changelog: https://github.com/enchant97/note-mark/compare/v0.19.0…v0.19.2

Changelog on GitHub →