Many Notes Vault Import Directory Traversal & XSS

Many Notes, a Markdown note-taking web application, is affected by a security vulnerability in versions prior to 0.16.0.

Vulnerability: The ZIP vault import feature allows authenticated users to write arbitrary files outside the importing user's vault, potentially into other users' vaults, including overwriting existing files. This can also lead to stored cross-site scripting (XSS) attacks when a victim opens the affected vault.

Affected Versions: All versions prior to 0.16.0

Mitigation: Upgrade to version 0.16.0 or later.