A vulnerability classified as problematic was found in streetwriters notesnook up to 3.3.16. This issue affects some unknown processing. The manipulation results in cross site scripting.
This vulnerability is reported as CVE-2026-33978. The attack can be launched remotely. No exploit exists.
Upgrading the affected component is advised.
