Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 43 qownnotes Critical XSS Risks Ua 2026-00a6b7589c

fedora
Calendar Grey January 27, 2026
Dist Fedora Esm H88
Critical qownnotes XSS vulnerabilities found in Fedora 43; updates recommended to protect data integrity.
See commit history Automatic update for qownnotes-26.1.7-2.fc43

Summary

QOwnNotes is the open source notepad with Markdown support and todo list manager

for GNU/Linux, macOS and Windows, that works together with Nextcloud Notes and

ownCloud Notes.

You are able to write down your thoughts with QOwnNotes and edit or search for

them later from your mobile device, like with Nextcloud Notes for Android or the

Nextcloud / ownCloud web-service.

The notes are stored as plain text markdown files and are synced with

Nextcloud's/ownCloud's file sync functionality. Of course other software, like

Syncthing or Dropbox can be used too.

If you like the concept of having notes accessible in plain text files, like it

is done in the Nextcloud / ownCloud notes apps to gain a maximum of freedom then

QOwnNotes is for you.

Update Information:

See commit history Automatic update for qownnotes-26.1.7-2.fc43. Changelog for qownnotes * Fri Jan 16 2026 Artem Polishchuk - 26.1.7-2 - Mask BR: botan-3 temporary * Thu Jan 15 2026 Artem Polishchuk - 26.1.7-1 - 26.1.7 - Bundle Botan 2 for now

Topics%20covered

Topics Covered

security advisory fedora update cross site scripting vuetify qownnotes

Change Log

* Sat Jan 17 2026 Artem Polishchuk - 26.1.7-4 - Build with system Botan-2 * Sat Jan 17 2026 Fedora Release Engineering - 26.1.7-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jan 16 2026 Artem Polishchuk - 26.1.7-2 - Mask BR: botan-3 temporary * Thu Jan 15 2026 Artem Polishchuk - 26.1.7-1 - 26.1.7 - Bundle Botan 2 for now

References


[ 1 ] Bug #2421920 - CVE-2025-8083 qownnotes: Vuetify Prototype Pollution via Preset options [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2421920 [ 2 ] Bug #2423088 - CVE-2025-8082 qownnotes: Vuetify: Cross-Site Scripting (XSS) vulnerability in VDatePicker component [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2423088

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-00a6b7589c' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: qownnotes
Product: Fedora 43
Version: 26.1.7
Release: 4.fc43
URL: https://www.qownnotes.org
Summary: Plain-text file notepad and todo-list manager with Markdown support

Topics%20covered

Topics Covered

security advisory fedora update cross site scripting vuetify qownnotes

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here