Security: notepad-plus-plus/notepad-plus-plus
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
-
TOCTOU: HMAC Checks Disk, Executes from MemoryGHSA-qm4c-qg8p-qfcr published
Jun 4, 2026 by donhoHigh -
CVE-2026-48800 BypassGHSA-p58x-r3c9-x9p6 published
May 31, 2026 by donhoHigh -
Arbitrary Code Execution via shortcuts.xml UserCommand InjectionGHSA-3x3f-3j39-pj3v published
May 27, 2026 by donhoHigh -
Arbitrary Code Execution via "commandLineInterpreter" of config.xmlGHSA-7hm3-wp5q-ccv9 published
May 26, 2026 by donhoHigh -
Notepad++ WM_COPYDATA COPYDATA_FULL_CMDLINE local DoS crashGHSA-r39g-3mcw-xcg2 published
May 26, 2026 by donhoModerate -
Privilege Escalation in Notepad++ v8.9.4 & v8.9.5 Installer via Uncontrolled Executable Search PathGHSA-6f8f-vmfc-r8c5 published
May 21, 2026 by donhoHigh -
Untrusted Search Path in Notepad++GHSA-rjvm-fcxw-2jxq published
Feb 16, 2026 by donhoHigh -
Privilege Escalation in Notepad++ v8.8.1 Installer via Uncontrolled Executable Search PathGHSA-9vx8-v79m-6m24 published
Jun 21, 2025 by donhoHigh -
Remote Code Execution notepad++ using Uncontrolled Search Path VulnerabilityGHSA-g5rj-m8mm-cgw6 published
Jun 20, 2025 by donhoHigh -
Heap buffer read overflow in FileManager::detectLanguageFromTextBeginingGHSA-v2h9-jfmf-5cgq published
Sep 8, 2023 by donhoLow
Learn more about advisories related to notepad-plus-plus/notepad-plus-plus in the GitHub Advisory Database