5056 matches found
CVE-2026-57530
Milkdown (versions
GO-2026-5208 Go Markdown has an out-of-bounds read in SmartypantsRenderer in github.com/gomarkdown/markdown
Go Markdown has an out-of-bounds read in SmartypantsRenderer in github.com/gomarkdown/markdown...
PT-2026-64410
Name of the Vulnerable Software and Affected Versions Milkdown versions prior to 7.21.3 Description A DOM cross-site scripting issue exists in the @milkdown/plugin-emoji package. Unauthenticated attackers can execute arbitrary JavaScript in the host application origin by tricking a victim into...
GHSA-R4RV-85JG-W4MF Mistune: Arbitrary File Read via Include directive path traversal
Summary A path traversal issue exists in mistune's Include directive when markdown files are processed using md.read. A crafted include path can cause files outside the intended markdown directory to be accessed. Details The issue occurs in the Include.parse method where user-supplied paths are...
EUVD-2026-42337
Mistune: Arbitrary File Read via Include directive path traversal...
EUVD-2026-42329
Mistune plugins/formatting: quadratic-time parsing on long runs of x, ==x==, and ^^x^^ markers strikethrough / mark / insert...
EUVD-2026-42334
Mistune: XSS via unescaped class option in Admonition directive...
EUVD-2026-42331
Mistune: XSS via percent-encoded javascript URI bypass in safeurl...
EUVD-2026-42339
Mistune directives/include: mutual .. include:: recursion crashes the renderer with RecursionError, denial of service via two attacker-controlled markdown files...
CVE-2026-32820
dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, the documentation and static markdown renderer accepts...
CVE-2026-32820 dataCycle Public Markdown Path Traversal Via /docs/*path
dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, the documentation and static markdown renderer accepts...
CVE-2026-32820
Summary: CVE-2026-32820 affects the dataCycle-CORE module of dataCycle. Before and including v25.07.3, the docs/static Markdown renderer accepts attacker-controlled path segments and passes them through Rails HTML sanitizer, which fails to remove directory traversal sequences. An unauthenticated ...
CVE-2026-46516
Frogman provides headless FreePBX control. Prior to version 1.6.6, Frogman's chat-console markdown formatter assets/js/chat.js's formatMarkdown inserted regex capture groups as raw HTML in four template patterns: inline code, bold, markdown links, and download links. Tool responses that reflect...
CVE-2026-46516
CVE-2026-46516 affects Frogman (headless FreePBX control). Before v1.6.6, the chat-console markdown formatter in assets/js/chat.js (formatMarkdown) inserted regex capture groups as raw HTML in four template patterns (inline code, bold, markdown links, download links). Tool responses containing us...
EUVD-2026-45963
Frogman provides headless FreePBX control. Prior to version 1.6.6, Frogman's chat-console markdown formatter assets/js/chat.js's formatMarkdown inserted regex capture groups as raw HTML in four template patterns: inline code, bold, markdown links, and download links. Tool responses that reflect...
CVE-2026-46516 Frogman vulnerable to stored XSS in chat console formatter (escalation vector in multi-admin deployments)
Frogman provides headless FreePBX control. Prior to version 1.6.6, Frogman's chat-console markdown formatter assets/js/chat.js's formatMarkdown inserted regex capture groups as raw HTML in four template patterns: inline code, bold, markdown links, and download links. Tool responses that reflect...
Oracle Linux 10 : python-markdown (ELSA-2026-19155)
The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-19155 advisory. 3.5.1-6.1 - Fix CVE-2025-69534 RHEL-153740 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...
VulnFeed
VulnFeed — CVE-to-ExploitDB Mapper Queries the NVD APIhttp...
CVE-2026-8075 Posting a malicious markdown image crashes the Mattermost Desktop App
Mattermost Desktop App versions =6.2 5.5.13 6.0.2.0 fail to properly null check when checking for headers in the Mattermost Desktop App which allows any user to crash another channel members Desktop App via posting a malicious link with an embedded image that misses one of those headers. Mattermo...