Note-mark v0.19.2 contains a vulnerability where notes and assets in soft-deleted public books remain accessible to unauthenticated users. Although the book endpoint returns a 404 after soft deletion, the notes and assets are still served due to improper filtering in raw SQL joins that do not respect the soft-delete status of the parent book. This allows anyone with the note ID or slug path to read the content despite the owner's intent to revoke access.