msiemens vulnerabilities

Products

• one2html 1
• onenote.rs 1
• rust onenote file parser 1

Latest msiemens CVEs

Newest publication first

1. CVE-2026-46671 Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory

   Published 2026-07-20

   Medium·CVSS 4.4 EPSS 0.15%

   Rust OneNote File Parser is a parser for Microsoft OneNote files implemented in Rust. Prior to version 1.1.1, a maliciously crafted .onetoc2 table-of-contents file can cause Parser::parse_notebook to open arbitrary files on the host filesystem outside the notebook's directory. Th...

2. CVE-2026-22810 Joplin: Path traversal in OneNote importer allows overwriting arbitrary files

   Published 2026-05-18

   High·CVSS 7.3 EPSS 0.21%

   Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions prior to 3.5.7 contain a path traversal vulnerability in the importer which allows overwriting arbitrary files on disk. The OneNote converter does not sanitize the n...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.