27 April 2026 - 12:51
Category: IT Fail
Even Notepad Plus Plus Wants a Raise
A string injection flaw in Notepad++ can crash the app or leak memory, because not even a text editor is safe from the void. It is nice to know our simplest tools are now security threats.
Source: Changeflow
The Full Story
Our reliable old friend Notepad++ has joined the vulnerability party with a string injection flaw that either crashes the application or spills its memory secrets to anyone who asks. Version 8.9.3 is the culprit here, showing that even the most basic tools for writing code can be used to break the very systems they help build. To avoid watching your text editor fall over, you will need to install the 8.9.4 update and hope that the next version does not develop its own existential crisis. It is quite impressive that we have reached a point where even a glorified digital notebook requires a rigorous patching schedule.