CVE-2022-28101: Lyonbros Turtl

Critical severity, CVSS 9.0. EPSS: 1% chance of exploitation in the next 30 days.

Turtlapp Turtle Note v0.7.2.6 does not filter the <meta> tag during markdown parsing, allowing attackers to execute HTML injection.

Affected products

• Lyonbros Turtl: version 0.7.2.6 only

Published 2022-04-28. Last modified 2026-06-17.