CVE-2019-19596

GitBook through 2.6.9 allows XSS via a local .md file...

@zambezi/ez-doc (1.0.0-prepare-for-open-source.1), apigeeks-devdocs (1.0.5) +4 more potentially affected by CVE-2019-19596 via gitbook (>=2.5.2, <=2.6.6)

gitbook NPM version =2.5.2, =1.0.3, =1.0.4 - gitbook-plugin-plasma 1.0.0 - lab-devdocs 0.0.1 Source cves: CVE-2019-19596 Source advisory: OSV:GHSA-HWGP-C653-6684...

CVE-2019-19596

The connected documents confirm CVE-2019-19596 affects GitBook up to version 2.6.9 and is a Cross‑Site Scripting (XSS) vulnerability triggered by a local .md file being rendered, enabling attacker‑controlled script to execute in the victim’s browser. Root cause details, affected environments, or ...