PT-2026-114204

Name of the Vulnerable Software and Affected Versions Markdown Preview Enhanced versions prior to 0.8.30 Description This extension for Visual Studio Code reads content from the .crossnote/head.html file within a repository and processes it through the resolvePathsInHeader function before inserti...

PT-2026-114163

n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the file-preview modal, which re-publishes binary data as an unsandboxed same-origin blob URL. A member who uploads a crafted item can run script in the n8n origin of whoever previews it, typically the...

PT-2026-114205

Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the webview message handler in src/preview-provider.ts accepts an attacker-controlled command value and attacker-controlled args, constructs a command in the crossnote namespace, and invokes...

PT-2026-114203

Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.29, Markdown Preview Enhanced evaluates repository-controlled .crossnote/config.js and .crossnote/parser.js files with vm.runInNewContext, which does not provide a security boundary from the Node.js hos...

CVE-2026-54702: Exposed Dangerous Method or Function

Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the webview message handler in src/preview-provider.ts accepts an attacker-controlled command value and attacker-controlled args, constructs a command in the crossnote namespace, and invokes...

CVE-2026-54701: Improper Neutralization of Input During Web Page Generation

Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, Markdown Preview Enhanced reads repository-controlled .crossnote/head.html content and passes it through resolvePathsInHeader before inserting it into the head of the preview webview document withou...

CVE-2026-54566: Improper Control of Generation of Code

Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.29, Markdown Preview Enhanced evaluates repository-controlled .crossnote/config.js and .crossnote/parser.js files with vm.runInNewContext, which does not provide a security boundary from the Node.js hos...

CVE-2026-54525: Improper Neutralization of Special Elements used in an OS Command

Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.28, Markdown Preview Enhanced preview-link handling passes a decoded, Markdown-controlled link target to a Windows file-opening helper that invokes childprocess.exec with the start command. When a Windo...

CVE-2026-110849: Improper Neutralization of Input During Web Page Generation

n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the file-preview modal, which re-publishes binary data as an unsandboxed same-origin blob URL. A member who uploads a crafted item can run script in the n8n origin of whoever previews it, typically the...

CVE-2026-54703: External Control of File Name or Path

Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the crossnote.updateMarkdown command in Markdown Preview Enhanced accepts an arbitrary URI and attacker-controlled content, then passes them to vscode.workspace.fs.writeFile without validating that...

PT-2026-114206

Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the crossnote.updateMarkdown command in Markdown Preview Enhanced accepts an arbitrary URI and attacker-controlled content, then passes them to vscode.workspace.fs.writeFile without validating that...

Yiyi Wang Markdown Preview: Enhanced input validation bug

Yiyi Wang’s Markdown Preview Enhanced version prior to 0.8.30 contains a vulnerability in input validation. This vulnerability stems from the crossnote.updateMarkdown command accepting arbitrary URIs and content controlled by attackers. Additionally, it does not verify whether the target is indee...

Yiyi Wang Markdown Preview Enhanced Permission Licensing and Access Control Vulnerabilities

Yiyi Wang’s Markdown Preview Enhanced version prior to 0.8.30 contained vulnerabilities related to permission management and access control. These vulnerabilities stemmed from the webview message handler in src/preview-provider.ts, which failed to validate command values and parameters against a...

Yiyi Wang Crossnote Command Injection Vulnerability

Yiyi Wang’s Crossnote versions prior to 0.8.28 contain a command injection vulnerability. This vulnerability stems from the handling of preview links, which pass the decoded link target to the Windows file open helper program. This program uses the start command to call childprocess.exec. When...

Critical: Red Hat Security Advisory: Red Hat AI Inference Tech Preview 3.5.2 (Gaudi)

Red Hat AI Inference Tech Preview 3.5.2 Gaudi is now available. Red Hat AI Inference Tech Preview...

CVE-2026-109562

SnapOtter 1.15.10 through 2.2.0 contains a missing authorization vulnerability that allows any authenticated principal to call the /api/v1/upload, /api/v1/preview and /api/v1/preview/generate handlers without permission checks. Attackers holding even a settings:read-scoped API key can stage...

CVE-2026-109562 SnapOtter 1.15.10 through 2.2.0 Missing Authorization via Upload and Preview API

SnapOtter 1.15.10 through 2.2.0 contains a missing authorization vulnerability that allows any authenticated principal to call the /api/v1/upload, /api/v1/preview and /api/v1/preview/generate handlers without permission checks. Attackers holding even a settings:read-scoped API key can stage...

CVE-2026-109562

Versions 1.15.10 through 2.2.0 of SnapOtter are vulnerable to a missing authorization flaw. This allows any authenticated principal to access the /api/v1/upload , /api/v1/preview , and /api/v1/preview/generate handlers without proper permission checks. An attacker with a low-privilege settings:re...

EUVD-2026-97885

SnapOtter 1.15.10 through 2.2.0 contains a missing authorization vulnerability that allows any authenticated principal to call the /api/v1/upload, /api/v1/preview and /api/v1/preview/generate handlers without permission checks. Attackers holding even a settings:read-scoped API key can stage...

CVE-2026-109562 SnapOtter 1.15.10 through 2.2.0 Missing Authorization via Upload and Preview API

SnapOtter 1.15.10 through 2.2.0 contains a missing authorization vulnerability that allows any authenticated principal to call the /api/v1/upload, /api/v1/preview and /api/v1/preview/generate handlers without permission checks. Attackers holding even a settings:read-scoped API key can stage...