PatchTheCVElfnovo vulnerabilities
Recent CVEs affecting lfnovo products. 4 tracked.
lfnovo has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-05-07. Highest priority: CVE-2026-33587 (score 43/100).
- CVE-2026-33589 MEDIUM 6.5 UPGRADE Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application
- CVE-2026-33588 HIGH 8.1 UPGRADE Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application
- CVE-2026-33587 CRITICAL 10.0 UPGRADE Lack of user input sanitisation in Open Notebook v1.8.3 allows the application user to execute Python code (an
- CVE-2026-28201 HIGH 7.8 UPGRADE An improper input validation, together with an overly permissive default CORS configuration in Open Notebook v
FAQ
How do I fix lfnovo vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is lfnovo being exploited right now?
None of the tracked lfnovo CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which lfnovo CVE should I patch first?
CVE-2026-33587 currently ranks highest (43/100): Lack of user input sanitisation in Open Notebook v1.8.3 allows the application user to execute Python code (an.