CVE-2026-46649 | laurent22 Joplin up to 3.7.1 SSO Authentication /api/login_with_code excessive authentication

September 21, 2026 Yanac

A vulnerability, which was classified as problematic, was found in laurent22 Joplin up to 3.7.1. This affects an unknown function of the file /api/login_with_code of the component SSO Authentication. Such manipulation leads to improper restriction of excessive authentication attempts.

This vulnerability is traded as CVE-2026-46649. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More