CVE-2026-73237

XSS vulnerability in Markdown handling in Apache Allura. This issue affects Apache Allura: from 1.10.0 before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue...

CVE-2026-73237: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

XSS vulnerability in Markdown handling in Apache Allura. This issue affects Apache Allura: from 1.10.0 before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue...

Many-Notes security vulnerabilities

many-notes is a Markdown reader by Bruno Personal Developer. A security vulnerability exists in many-notes version 0.10.1, which stems from improper handling of Markdown files and could lead to cross-site scripting attacks...

Nuxt MDC cross-site scripting vulnerability

Nuxt MDC is a Nuxt open source application that enhances regular Markdown. A cross-site scripting vulnerability exists in Nuxt MDC versions prior to 0.17.2, which stems from improper handling of Markdown and could lead to a stored cross-site scripting attack...

Design/Logic Flaw

domain/section/markdown/markdown.go in Documize before 3.5.1 mishandles untrusted Markdown content. This was addressed by adding the bluemonday HTML sanitizer to defend against XSS...