Color-notes vulnerabilities
Published CVEs affecting Color-notes products: 1 record(s), with severity, exploitation and fixes.
CVE-2021-47969
High · 7.5
CWE-789 May 16, 2026
Color Notes 1.4 Denial of Service via Long Character String
Color Notes 1.4 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields. Attackers can generate a payload containing 350,000 repeated characters and paste it twice into a new note to cause the application to stop responding.