180 matches found
XPEViewer
PE file viewer/editor for Windows, Linux and MacOS. Download: https://github.com/horsicq/XPEViewer/releases How to run: https://github.com/horsicq/XPEViewer/blob/master/docs/RUN.md How to build: https://github.com/horsicq/XPEViewer/blob/master/docs/BUILD.md Changelog:...
CVE-2026-86016
VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment preNode.innerHTML = pmetaData in src/data/extra/web/js/markdownit.js to insert YAML frontmatter metadata into a pre element before the protectFromXss sanitization path runs. Opening an attacker-supplied Markdown note can...
CVE-2026-86016: Improper Neutralization of Input During Web Page Generation
VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment preNode.innerHTML = pmetaData in src/data/extra/web/js/markdownit.js to insert YAML frontmatter metadata into a pre element before the protectFromXss sanitization path runs. Opening an attacker-supplied Markdown note can...
PT-2026-112873
VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment preNode.innerHTML = p metaData in src/data/extra/web/js/markdownit.js to insert YAML frontmatter metadata into a pre element before the protectFromXss sanitization path runs. Opening an attacker-supplied Markdown note can...
CVE-2026-91127
File Viewer is a browser-native viewer for Office, PDF, CAD, archive, and other files in private and internal web applications. Prior to @file-viewer/doc 2.3.1 and msdoc-viewer 0.2.2, the legacy DOC renderer emitted document-controlled hyperlink targets into generated HTML after character escapin...
GHSA-3753-M2X2-Q623 File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer
Summary Before 2.3.1, the legacy .doc renderer emitted document hyperlink targets after HTML escaping but without a URL-scheme allowlist. A crafted .doc could therefore render a live javascript:, vbscript:, data:, or similarly unsafe link. Script could execute in the embedding origin if a viewer...
File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer
Summary Before 2.3.1, the legacy .doc renderer emitted document hyperlink targets after HTML escaping but without a URL-scheme allowlist. A crafted .doc could therefore render a live javascript:, vbscript:, data:, or similarly unsafe link. Script could execute in the embedding origin if a viewer...
@anchrd/intel (>=0.59.0, <=0.125.0), @anchrd/intel-ui (>=0.41.0, <=0.57.0) +13 more potentially affected by CVE-2026-91127 via @file-viewer/doc (>=2.1.23, <=2.3.0)
@file-viewer/doc NPM version =2.1.23, =0.59.0, =0.41.0, =2.1.23, =2.1.23, =2.1.23, =2.1.23, =2.1.23, =2.1.23, =2.1.23, =2.1.23, =2.1.23, =2.1.23, =2.1.23, =0.1.0, =0.9.0-beta.25, =1.1.4 Source cves: CVE-2026-91127 Source advisory: GHSA-3753-M2X2-Q623...
@anchrd/intel (>=0.59.0, <=0.125.0), @anchrd/intel-ui (>=0.41.0, <=0.57.0) +13 more potentially affected by CVE-2026-91127 via @file-viewer/doc (>=2.1.23, <=2.3.0)
@file-viewer/doc NPM version =2.1.23, =0.59.0, =0.41.0, =2.1.23, =2.1.23, =2.1.23, =2.1.23, =2.1.23, =2.1.23, =2.1.23, =2.1.23, =2.1.23, =2.1.23, =2.1.23, =0.1.0, =0.9.0-beta.25, =1.1.4 Source cves: CVE-2026-91127 Source advisory: OSV:GHSA-3753-M2X2-Q623...
CVE-2026-91127 File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer
File Viewer is a browser-native viewer for Office, PDF, CAD, archive, and other files in private and internal web applications. Prior to @file-viewer/doc 2.3.1 and msdoc-viewer 0.2.2, the legacy DOC renderer emitted document-controlled hyperlink targets into generated HTML after character escapin...
CVE-2026-91127
File Viewer 's legacy DOC renderer in @file-viewer/doc (< 2.3.1) and msdoc-viewer (
CVE-2026-91127 File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer
File Viewer is a browser-native viewer for Office, PDF, CAD, archive, and other files in private and internal web applications. Prior to @file-viewer/doc 2.3.1 and msdoc-viewer 0.2.2, the legacy DOC renderer emitted document-controlled hyperlink targets into generated HTML after character escapin...
CVE-2026-91127 File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer
File Viewer is a browser-native viewer for Office, PDF, CAD, archive, and other files in private and internal web applications. Prior to @file-viewer/doc 2.3.1 and msdoc-viewer 0.2.2, the legacy DOC renderer emitted document-controlled hyperlink targets into generated HTML after character escapin...
CVE-2026-91127
File Viewer is a browser-native viewer for Office, PDF, CAD, archive, and other files in private and internal web applications. Prior to @file-viewer/doc 2.3.1 and msdoc-viewer 0.2.2, the legacy DOC renderer emitted document-controlled hyperlink targets into generated HTML after character escapin...
@anchrd/intel (>=0.59.0, <=0.125.0), @anchrd/intel-ui (>=0.41.0, <=0.57.0) +13 more potentially affected by CVE-2026-91127 via @file-viewer/doc (>=2.1.23, <=2.3.0)
@file-viewer/doc NPM version =2.1.23, =0.59.0, =0.41.0, =2.1.23, =2.1.23, =2.1.23, =2.1.23, =2.1.23, =2.1.23, =2.1.23, =2.1.23, =2.1.23, =2.1.23, =2.1.23, =0.1.0, =0.9.0-beta.25, =1.1.4 Source cves: CVE-2026-91127 Source advisory: MEND:CVE-2026-91127...
EUVD-2026-83206
File Viewer is a browser-native viewer for Office, PDF, CAD, archive, and other files in private and internal web applications. Prior to @file-viewer/doc 2.3.1 and msdoc-viewer 0.2.2, the legacy DOC renderer emitted document-controlled hyperlink targets into generated HTML after character escapin...
CVE-2026-91127: Improper Neutralization of Input During Web Page Generation
File Viewer is a browser-native viewer for Office, PDF, CAD, archive, and other files in private and internal web applications. Prior to @file-viewer/doc 2.3.1 and msdoc-viewer 0.2.2, the legacy DOC renderer emitted document-controlled hyperlink targets into generated HTML after character escapin...
PT-2026-95555
Name of the Vulnerable Software and Affected Versions @file-viewer/doc versions prior to 2.3.1 msdoc-viewer versions prior to 0.2.2 Description The legacy DOC renderer fails to restrict URL schemes when emitting document-controlled hyperlink targets into generated HTML. A crafted legacy DOC file...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the extensionsRequired field of glTF files processed by the 3D file viewer. An attacker can execute arbitrary JavaScript code in the context of another user by uploading a crafted glTF file containing malicio...
CVE-2026-28737: Improper Neutralization of Input During Web Page Generation
Gitea versions from 1.25.0 before 1.26.0 allow stored cross-site scripting through the extensionsRequired field in glTF files rendered by the 3D file viewer...