PT-2026-114206

Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the crossnote.updateMarkdown command in Markdown Preview Enhanced accepts an arbitrary URI and attacker-controlled content, then passes them to vscode.workspace.fs.writeFile without validating that...

Yiyi Wang Markdown Preview: Enhanced input validation bug

Yiyi Wang’s Markdown Preview Enhanced version prior to 0.8.30 contains a vulnerability in input validation. This vulnerability stems from the crossnote.updateMarkdown command accepting arbitrary URIs and content controlled by attackers. Additionally, it does not verify whether the target is indee...