7443 matches found
CVE-2025-7969
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in markdown-it allows Cross-Site Scripting XSS. This vulnerability is associated with program files lib/renderer.mjs. This issue affects markdown-it: 14.1.0. NOTE: the Supplier does not conside...
DEBIAN-CVE-2025-7969
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in markdown-it allows Cross-Site Scripting XSS. This vulnerability is associated with program files lib/renderer.mjs. This issue affects markdown-it: 14.1.0. NOTE: the Supplier does not conside...
UBUNTU-CVE-2025-7969
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in markdown-it allows Cross-Site Scripting XSS. This vulnerability is associated with program files lib/renderer.mjs. This issue affects markdown-it: 14.1.0. NOTE: the Supplier does not conside...
Rapid7 named a representative vendor in 2025 Gartner® Market Guide for Cloud-Native Application Protection Platforms (CNAPP)
Being a cloud security professional can feel like you’re caught in the middle of a tug-of-war. On one side, developers, driven by the need for speed and innovation, see security as a potential bottleneck; on the other, business leaders, who are often removed from the technical weeds, have little...
CVE-2025-7969 Markdown-it 14.1.0 - Cross-site scripting (XSS)
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in markdown-it allows Cross-Site Scripting XSS. This vulnerability is associated with program files lib/renderer.mjs. This issue affects markdown-it: 14.1.0. NOTE: the Supplier does not conside...
CVE-2025-7969
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in markdown-it allows Cross-Site Scripting XSS. This vulnerability is associated with program files lib/renderer.mjs. This issue affects markdown-it: 14.1.0. NOTE: the Supplier does not conside...
CVE-2025-7969 Markdown-it 14.1.0 - Cross-site scripting (XSS)
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in markdown-it allows Cross-Site Scripting XSS. This vulnerability is associated with program files lib/renderer.mjs. This issue affects markdown-it: 14.1.0. NOTE: the Supplier does not conside...
CVE-2025-7969 Markdown-it 14.1.0 - Cross-site scripting (XSS)
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in markdown-it allows Cross-Site Scripting XSS. This vulnerability is associated with program files lib/renderer.mjs. This issue affects markdown-it: 14.1.0. NOTE: the Supplier does not conside...
CVE-2025-7969
CVE-2025-7969 is an XSS issue in markdown-it (improper neutralization of input during web page generation) affecting the lib/renderer.mjs path, with markdown-it 14.1.0 as the vulnerable version. IBM and related advisories reference this CVE across multiple products, noting remediation requires up...
PT-2025-34250 · Unknown +1 · Markdown-It +1
Name of the Vulnerable Software and Affected Versions: markdown-it version 14.1.0 Description: A flaw exists in markdown-it due to improper neutralization of input during web page generation, which allows for Cross-Site Scripting XSS. The issue is associated with the lib/renderer.mjs program file...
Markdown-It 安全漏洞
Markdown-It is a Markdown parser from the Markdown it! open source. A security vulnerability exists in Markdown-It version 14.1.0 that stems from improper input neutralization and could lead to cross-site scripting...
Linux Distros Unpatched Vulnerability : CVE-2025-53357
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI, which stands for Gestionnaire Libre de Parc Informatique, is a Free Asset and IT Management Software package, that provides ITIL Service Desk features,...
Linux Distros Unpatched Vulnerability : CVE-2023-26303
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...
Malicious code in galaxy-wezen-release-it-neuromorphic (npm)
The package galaxy-wezen-release-it-neuromorphic was found to contain malicious code...
Malicious code in release-it-ultra-transport-eslint-config (npm)
The package release-it-ultra-transport-eslint-config was found to contain malicious code...
Malicious code in update-terser-webpack-plugin-stratigraphy-release-it (npm)
The package update-terser-webpack-plugin-stratigraphy-release-it was found to contain malicious code...
Malicious code in @zalastax/nolb-react-it (npm)
The package @zalastax/nolb-react-it was found to contain malicious code...
MAL-2025-28677 Malicious code in paleomagnetism-bootstrap-release-it-ichnology (npm)
The package paleomagnetism-bootstrap-release-it-ichnology was found to contain malicious code...