CVE-2022-35131: Joplinapp Joplin

Critical severity, CVSS 9.0. EPSS: 2.3% chance of exploitation in the next 30 days.

Joplin v2.8.8 allows attackers to execute arbitrary commands via a crafted payload injected into the Node titles.

Affected products

• Joplinapp Joplin: version 2.8.8 only

Published 2022-07-25. Last modified 2026-07-09.