EUVD-2025-111786

Malicious code in less-loader-prettier-plugin-markdown-pino-zephyr npm...

EUVD-2025-7037

Malicious code in bioql PyPI...

CVE-2024-11850

A stored cross-site scripting XSS vulnerability exists in the latest version of langgenius/dify. The vulnerability is due to improper validation and sanitization of user input in SVG markdown support within the chatbot feature. An attacker can exploit this vulnerability by injecting malicious SVG...

CVE-2024-11850: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability exists in the latest version of langgenius/dify. The vulnerability is due to improper validation and sanitization of user input in SVG markdown support within the chatbot feature. An attacker can exploit this vulnerability by injecting malicious SVG...

PT-2025-12113

Name of the Vulnerable Software and Affected Versions langgenius/dify affected versions not specified Description A stored cross-site scripting XSS issue exists due to improper validation and sanitization of user input in SVG markdown support within the chatbot feature. An attacker can exploit th...

CVE-2024-9873: Improper Neutralization of Input During Web Page Generation

The Community by PeepSo – Social Network, Membership, Registration, User Profiles, Premium – Mobile App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via URLs in posts, comments, and profiles when Markdown support is enabled in all versions up to, and including, 6.4.6.1 due to...

PT-2024-39903

Name of the Vulnerable Software and Affected Versions The Community by PeepSo plugin for WordPress versions up to, and including, 6.4.6.1 Description The issue is related to Stored Cross-Site Scripting via URLs in posts, comments, and profiles when Markdown support is enabled. This is due to...

编号撤回

HTMLDOC is an open source program that converts HTML and Markdown files to EPUB, Indexed HTML, PostScript and PDF formats. This CVE number has been withdrawn...

OPENSUSE-SU-2021:0895-1 Security update for htmldoc

This update for htmldoc fixes the following issues: Update to version 1.9.12 Fixed buffer-overflow CVE-2021-20308 boo1184424 Fixed a crash bug with 'data:' URIs and EPUB output Fixed several other crash bugs Fixed JPEG error handling Fixed some minor issues Removed the bundled libjpeg, libpng, an...

Security update for htmldoc (important)

openSUSE Security Update: Security update for htmldoc Announcement ID: openSUSE-SU-2021:0895-1 Rating: important References: 1184424 Cross-References: CVE-2021-20308 CVSS scores: CVE-2021-20308 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-20308 SUSE: 3.3...

OPENSUSE-SU-2021:0893-1 Security update for htmldoc

This update for htmldoc fixes the following issues: htmldoc was updated to version 1.9.12 Fixed buffer-overflow CVE-2021-20308 boo1184424 Fixed a crash bug with 'data:' URIs and EPUB output Fixed several other crash bugs Fixed JPEG error handling Fixed some minor issues Removed the bundled libjpe...

Stored Cross-Site Scripting Vulnerability in Ant Notes

Ant Notes is a cloud notes software, cross-platform, support markdown format, support for web, PC, mobile APP client, and WeChat version, support for generating public blogs and PDF. Ant Notes has a stored cross-site scripting vulnerability. Attackers can use the vulnerability to obtain sensitive...

PT-2019-15882 · Gitbook · Gitbook

Name of the Vulnerable Software and Affected Versions: GitBook versions 2.6.9 and earlier Description: The issue allows for Cross-site Scripting XSS via a local .md file, potentially through javascript inclusion. This could be exploited by an attacker to execute malicious scripts on a user's...