CVE-2026-44522

high

Published 2026-05-14 · Modified 2026-05-15

CVSS v3

—

CVSS v2

—

VIR risk

8.0

Description

Note Mark: Arbitrary File Write via Path Traversal in Asset Names Leads to Remote Code Execution

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

Package impact

Ecosystem	Package	Vulnerable	Fixed
Go	github.com/enchant97/note-mark/backend	`<0.0.0-20260501152243-db3f72bff780`	`0.0.0-20260501152243-db3f72bff780`
GO	github.com/enchant97/note-mark/backend	`< 0.0.0-20260501152243-db3f72bff780`	`0.0.0-20260501152243-db3f72bff780`

References

CWEs

CWE-20 CWE-22

Verify integrity in audit chain (admin only). AS-IS.