What is GHSA-3799-7g8h-9xh6?

GHSA-3799-7g8h-9xh6 is a security advisory published by GitHub Security Advisories with Medium severity. Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android...

Which CVE IDs does GHSA-3799-7g8h-9xh6 cover?

GHSA-3799-7g8h-9xh6 covers the following CVE IDs: CVE-2026-78325. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-3799-7g8h-9xh6Medium

Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android...

Vendor

GitHub Security Advisories

Published

September 7, 2026

Last Modified

September 7, 2026

🔗 CVE IDs covered (1)

CVE-2026-78325 →

📋 Description

Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android through 3.201.24 allows an attacker to execute arbitrary JavaScript in the application context when a victim imports a crafted .enex or Google Keep HTML file, leading to theft of encryption keys and note data, and arbitrary invocation of native device APIs.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-78325
https://github.com/standardnotes/app/compare/%40standardnotes/desktop%403.201.24...%40standardnotes/desktop%403.201.25
https://proton.me/security/security-advisories
https://github.com/advisories/GHSA-3799-7g8h-9xh6