Poznote

poznote.com
Poznote

Self-hosted notes and tasks app with rich-text, Markdown and drawing editors, tags, multi-user, OIDC login and a REST API. Docker-based (PHP + SQLite); the only outbound call is a daily update check. No mobile apps (PWA), no end-to-end encryption.

No Security Audit Open Source

Poznote Source Code

Author

timothepoznanski

Description

Powerful note-taking without the hassle.

#docker#documentation#free#note-taking#notes#self-hosted#tasks#todolist#webapp#wiki

Homepage

https://poznote.com

Repository

  • LicenseMIT
  • Created01 Aug 25
  • Primary languageJavaScript
  • Size135,822 KB
  • Stars909
  • Forks41
  • Watchers909

Language Usage

Language Usage

Project Health

  • Last commit6 days ago
  • Open issues12
  • Latest release6.111.0

Recent Commits

  • Timothé Poznanski(07 Oct 26)

    Merge pull request #1591 from timothepoznanski/dev Dev

  • timothepoznanski(07 Oct 26)

    Merge branch 'dev' of https://github.com/timothepoznanski/poznote into dev

  • timothepoznanski(07 Oct 26)

    chore: update version to 6.111.0

  • Timothé Poznanski(07 Oct 26)

    Merge pull request #1590 from timothepoznanski/feat/markdown-live-show-syntax Feat/markdown live show syntax

  • timothepoznanski(07 Oct 26)

    feat: add option to enable/disable heading underline in Markdown notes

  • timothepoznanski(07 Oct 26)

    fix: ensure slash command menu stays within viewport when updated Added a function to reposition the slash command menu if new rows are added after it has been displayed, preventing it from going off-screen. This improves usability by ensuring the menu remains accessible.

  • timothepoznanski(07 Oct 26)

    feat: enhance Markdown note editing with live preview and rich text options - Introduced a new 'rich text' view mode alongside existing 'live' and 'split' modes for Markdown notes. - Updated initialization logic to support new view modes for both desktop and mobile. - Modified view cycling logic to accommodate the new 'rich' mode and adjusted related UI elements. - Removed deprecated settings related to live syntax display and updated relevant documentation. - Enhanced user interface to reflect changes in view modes and settings.

  • timothepoznanski(07 Oct 26)

    feat: improve note padding and text alignment for markdown notes

  • timothepoznanski(07 Oct 26)

    Enhance tooltip description for Markdown live syntax setting Updated the tooltip text for the "Show Markdown syntax at the cursor" setting to clarify that when the feature is turned off, text input remains plain and characters like '#' or '*' are not interpreted as Markdown.

  • Timothé Poznanski(06 Oct 26)

    Merge pull request #1588 from timothepoznanski/dev Release 6.110.0

  • timothepoznanski(06 Oct 26)

    chore: update version to 6.110.0

  • Timothé Poznanski(06 Oct 26)

    Merge pull request #1587 from timothepoznanski/dev Release 6.110.0-beta

  • timothepoznanski(06 Oct 26)

    chore: update version to 6.110.0-beat

  • timothepoznanski(06 Oct 26)

    feat: add a setting to show or hide Markdown syntax at the cursor in live rendering New account setting markdown_live_show_syntax (Settings > Markdown), off by default: in live rendering the Markdown syntax never comes back under the caret; turned on, it reappears on the element the caret is in. Also adds build/markdown-editor/src/live-preview.js, the source of the live rendering extension, which the directory's ignore rule had kept out of the previous commit. Co-Authored-By: Claude Opus 5.5 <[email protected]>

  • timothepoznanski(06 Oct 26)

    feat: enhance Markdown editor with live rendering and improved view modes - Implemented live rendering for Markdown notes, allowing users to see formatted text while editing. - Added functionality to remember and scroll to the last edited Excalidraw diagram when returning to a note. - Introduced a new setting for the default view mode of new Markdown notes (split, edit, live rendering). - Updated UI controls to cycle through Markdown view modes (classic, live, split) with appropriate icons and labels. - Improved accessibility by ensuring buttons remain visible and provide clear feedback on their state. - Enhanced image handling in Markdown to support live rendering and preview synchronization. - Refactored related JavaScript functions for better maintainability and clarity.

  • timothepoznanski(06 Oct 26)

    feat: add support for table formulas in markdown and HTML notes - Introduced a new JavaScript module (table-formulas.js) to handle formulas like SUM, AVG, MIN, MAX, COUNT, and PRODUCT for table cells. - Updated the markdown parser to recognize and compute formulas in markdown tables. - Enhanced the HTML rendering to display computed values for formula cells using data attributes. - Added context menu options for applying formulas to table rows and columns. - Implemented CSS styles for formula indicators in the table context menu. - Created tests to validate the functionality of the new formula features, including number parsing, formula computation, and markdown conversion.

  • timothepoznanski(06 Oct 26)

    feat: enhance inline code handling to support backticks within code spans

  • timothepoznanski(06 Oct 26)

    feat: enhance scrollbar styling for Linux users to improve visual consistency

  • Timothé Poznanski(06 Oct 26)

    Merge pull request #1584 from GOODJINC/feat/korean-review-followup i18n(ko): refine recent translations and update documentation menu paths

  • GOODJINC(06 Oct 26)

    Refine Korean translations and documentation paths

  • Timothé Poznanski(05 Oct 26)

    Merge pull request #1583 from timothepoznanski/dev Release 6.109.0

  • timothepoznanski(05 Oct 26)

    feat: enhance Excalidraw diagram handling for improved clipboard and paste functionality

  • timothepoznanski(05 Oct 26)

    feat: update schema version and enhance UI customization for note metadata display

  • timothepoznanski(05 Oct 26)

    chore: update version to 6.109.0

  • timothepoznanski(05 Oct 26)

    feat: implement undoable checklist and block element insertion for improved user experience

  • timothepoznanski(05 Oct 26)

    refactor: remove Excalidraw placeholder text and related logic across multiple files

  • Timothé Poznanski(05 Oct 26)

    Merge pull request #1581 from timothepoznanski/dev Release 6.109.0-beta

  • timothepoznanski(05 Oct 26)

    feat: add support for Excalidraw diagrams with embedding and restoration functions

  • timothepoznanski(05 Oct 26)

    chore: update version to 6.109.0-beta

  • timothepoznanski(05 Oct 26)

    feat: implement dark theme support for Excalidraw previews and add related tests

Poznote Security

Security Advisories (9)

  • lowPatched

    GHSA-97jp-22c4-24pxOpen redirect in the login.php flow and allowed `javascript:` protocol

  • highPatchedCVSS 8.8

    GHSA-xjh4-q36h-mcvvStored XSS on imported notes

  • highPatched

    GHSA-m44h-mv9f-38x3Stored XSS via SVG attachment upload

  • highPatched

    GHSA-4j6w-6478-cg7jStored XSS via escaped-iframe re-unescape — raw attribute passthrough in unescapeIframesInHtml

  • highPatched

    GHSA-vv49-2463-g2gjStored XSS via guest markdown task-write — sanitizer omitted on public task paths

  • criticalPatchedCVSS 9.9

    GHSA-rmm5-6582-qcmcRemote code execution through restore / import fontionnality

  • mediumPatchedCVSS 5.4

    GHSA-33wr-rw77-83cjStored XSS through attachment filename

  • highPatchedCVSS 7.5

    GHSA-r45x-r86q-2p3xStored XSS

  • criticalPatchedCVSS 9.9

    GHSA-3v39-q26w-c3h7authenticated arbitrary-file-upload Remote Code Execution

Poznote Website

Website

Poznote - Self-hosted note-taking

Poznote is a free, open source, self-hosted note-taking and documentation platform: rich text editor, tags, Kanban boards, tasks, calendar, powerful search, MCP server and REST API. Runs anywhere with Docker.

Redirects

Does not redirect

Security Checks

All 65 security checks passed

Server Details

  • IP Address46.202.170.131
  • LocationParis,Ile-de-France,France,EU
  • ISPJSC Ukrtelecom
  • ASNAS47583

Associated Countries

  • USUS
  • FRFR

Safety Score

Website marked as safe

100%

Trackers

No known trackers found

Blacklist Check

poznote.com was found on 0 blacklists

  • AntiSocial Blacklist
  • Artists Against 419
  • Badbitcoin
  • Bambenek Consulting
  • CERT Polska
  • CoinBlockerLists
  • CRDF
  • CryptoScamDB
  • EtherAddressLookup
  • EtherScamDB
  • Fake Website Buster
  • MetaMask EthPhishing
  • NABP Not Recommended Sites
  • OpenPhish
  • PetScams
  • PhishFeed
  • PhishFort
  • Phishing.Database
  • PhishStats
  • PhishTank
  • Phishunt
  • RPiList Not Serious
  • Scam.Directory
  • SecureReload Phishing List
  • Spam404
  • StopGunScams
  • Suspicious Hosting IP
  • ThreatFox
  • ThreatLog
  • TweetFeed
  • URLhaus
  • ViriBack C2 Tracker

Website Preview

Website preview

Poznote Socials

Poznote Reviews

More Digital Notes

  • Cryptee

    Cryptee

    crypt.ee

    Private & encrypted rich-text documents. Cryptee has encryption and anonymity at its core, it also has a beautiful and minimalistic UI. You can use Cryptee from the browser, or download native apps. Comes with many additional features, such as support for photo albums and file storage. The disadvantage is that only the frontend is open source. Pricing is free for starter plan, $3/ month for 10GB, additional plans go up-to 2TB.

    No Security AuditNot Open Source cryptee/web-client
  • Joplin

    Joplin

    joplinapp.org

    Cross-platform desktop and mobile note-taking and todo app. Easy organisation into notebooks and sections, revision history and a simple UI. Allows for easy import and export of notes to or from other services. Supports synchronisation with cloud services, implemented with E2EE.

    Security Audited Open Source laurent22/joplin
  • Logseq

    Logseq

    logseq.com

    Privacy-first, open-source knowledge base that works on top of local plain-text Markdown and Org-mode files. Supports lots of different note modes, including task management, PDF annotation, flashcards, whiteboards strong markdown support and more. Includes themes and extensions, backed by a strong community

    No Security Audit Open Source logseq/logseq
  • Notable

    Notable

    notable.md

    An offline markdown-based note editor for desktop, with a simple, yet feature-rich UI. All notes are saved individually as .md files, making them easy to manage. No mobile app, built-in cloud-sync, encryption or web UI. But due to the structure of the files, it is easy to use your own cloud sync provider, and additional features are provided through extensions.

    No Security Audit Open Source notable/notable
  • Obsidian

    Obsidian

    obsidian.md

    A powerful knowledge base that works on top of local plain-text Markdown files. It has a strong community, and a lot of plugins and themes. Generally privacy-respecting, but no encryption out of the box, and some of the code is obfuscated or not fully open source

  • Standard Notes

    Standard Notes

    standardnotes.com

    S.Notes is a free, open-source, and completely encrypted private notes app. It has a simple UI, yet packs in a lot of features, thanks to the Extensions Store, allowing for: To-Do lists, Spreadsheets, Rich Text, Markdown, Math Editor, Code Editor and many more. You can choose between a number of themes (yay, dark mode!), and it features built-in secure file store, tags/ folders, fast search and more. Standard Notes is actively developed, and fully open-source.

  • Turtle

    Turtle

    turtlapp.com

    A secure, collaborative notebook. Self-host it yourself, or use their hosted plan (free edition or $3/ month for premium).

    Security Audited Open Source turtl/desktop
  • VNote

    VNote

    app.vnote.fun/en_us

    A free, open-source note-taking application built with Qt, focused on providing a pleasant Markdown editing experience. It manages notes directly as plain text files on your local system.

About the Data: Poznote

Change History

Edit Poznote Data

You can edit Poznote's entry in this section of awesome-privacy.yml by submitting a PR to our GitHub repo.
Note that some of the information shown above has been aggregated from external sources, a list of these can be found data documentation.

Origin Data

Modify Data

API

You can access Poznote's data programmatically via our API. Simply make a GET request to:

https://api.awesome-privacy.xyz/v1/services/poznote

The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

Share Poznote

Help your friends compare Digital Notes, and pick privacy-respecting software and services.
Share Poznote and Awesome Privacy with your network!