These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
NoteGen before 0.32.0 has a vulnerability that allows for remote code execution due to the Tauri shell plugin's shell:allow-execute capability. This enables full remote code execution on the user's machine when combined with script execution in the webview. Users of NoteGen before version 0.32.0 should update to version 0.32.0 or later to mitigate this vulnerability.
CVE-2026-17496 is a high-severity cross-site scripting vulnerability in NoteGen before version 0.32.0. The vulnerability allows attackers to execute arbitrary JavaScript in the application context by injecting executable markup into AI chat responses. This occurs because NoteGen renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInner [truncated]