PT-2026-93790

Name of the Vulnerable Software and Affected Versions @nuxtjs/mdc versions prior to 0.22.1 Description @nuxtjs/mdc renders untrusted Markdown to a Vue component tree and enables raw HTML by default via parseMarkdown with allowDangerousHtml set to true. The built-in sanitizer, which uses...

CVE-2026-63671: Improper Neutralization of Input During Web Page Generation

MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. Prior to 0.22.1, @nuxtjs/mdc uses parseMarkdown with allowDangerousHtml enabled by default and relies on validateProps, validateProp, and unsafeLinkPrefix to remove executable URLs from untrusted...