1.7.1

DATE	CVE	VULNERABILITY TITLE	RISK
2019-05-13	CVE-2019-12043	Cross-site Scripting vulnerability in Remarkable Project Remarkable 1.7.1 In remarkable 1.7.1, lib/parser_inline.js mishandles URL filtering, which allows attackers to trigger XSS via unprintable characters, as demonstrated by a \x0ejavascript: URL. network low complexity remarkable-project CWE-79	6.1
2019-05-13	CVE-2019-12041	Unspecified vulnerability in Remarkable Project Remarkable 1.7.1 lib/common/html_re.js in remarkable 1.7.1 allows Regular Expression Denial of Service (ReDoS) via a CDATA section. network low complexity remarkable-project	7.5