Denial of Service Vulnerability in Joplin Note-Taking Application

CVE-2025-57798

What is CVE-2025-57798?

Joplin, an open source note-taking application, has a Denial of Service vulnerability due to improper validation of title input length. This flaw allows attackers to exploit the application by causing an Out Of Memory (OOM) error, leading to unexpected termination of the application. Attackers can exploit this vulnerability through two primary vectors: direct user input or by leveraging the local web service API after compromising a user's authentication token. By entering excessively long strings into the note title, either manually or via a crafted HTTP POST request, the application attempts to allocate an unbounded amount of memory. This vulnerability has been addressed in version 3.7.1.

References