Readwise Reader
3 CVEs affecting Readwise Reader. Latest disclosed: 2026-09-25. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-18320 | Medium | 6.1 | 2026-09-25 | Readwise Reader for Android uses a sanitize-html configuration that permits all attributes on SVG and PATH elements due to a wildcard attribute rule. This conf… |
CVE-2026-18312 | Medium | 6.1 | 2026-09-25 | Readwise Reader for Android constructs URLs in its WebView using attacker-controlled metadata without proper encoding or escaping. The application interpolates… |
CVE-2026-18311 | Medium | 6.1 | 2026-09-25 | Readwise Reader for Android contains a cross-site scripting vulnerability due to missing HTML sanitization in its processing of imported document metadata. Att… |