CVE-2026-50873

The CVE concerns flatnotes v5.5.4, where the attachment handling component is vulnerable to arbitrary file upload. A crafted HTML or SVG file can lead to arbitrary code execution, per the provided descriptions. The sources consistently reference an upload vector in the attachment handling flow an...

EUVD-2024-52657

Malicious code in bioql PyPI...

CVE-2024-54730

Flatnotes...

CVE-2024-54730

Flatnotes v5.3.1 is vulnerable to denial of service through the upload image function...

CVE-2024-54730

Flatnotes v5.3.1 is vulnerable to denial of service through the upload image function...