@joplin/onenote-converter: Path traversal in OneNote importer allows overwriting arbitrary files
A path traversal vulnerability in the OneNote importer allows overwriting arbitrary files on disk.
Advisories for Npm/@Joplin/Onenote-Converter package
2026