450 matches found
CVE-2026-126800
Hydro @hydrooj/ui-default before 4.59.1 contains a stored cross-site scripting vulnerability that allows registered users to inject script by placing double quotes in language- class tokens within markdown-it-xss.ts. Attackers can store a payload in their profile bio that executes when...
CVE-2026-126800
Hydro @hydrooj/ui-default before 4.59.1 contains a stored cross-site scripting vulnerability that allows registered users to inject script by placing double quotes in language- class tokens within markdown-it-xss.ts. Attackers can store a payload in their profile bio that executes when...
CVE-2026-126800 Hydro @hydrooj/ui-default before 4.59.1 Stored XSS via Markdown language- Class
Hydro @hydrooj/ui-default before 4.59.1 contains a stored cross-site scripting vulnerability that allows registered users to inject script by placing double quotes in language- class tokens within markdown-it-xss.ts. Attackers can store a payload in their profile bio that executes when...
EUVD-2026-124015
Hydro @hydrooj/ui-default before 4.59.1 contains a stored cross-site scripting vulnerability that allows registered users to inject script by placing double quotes in language- class tokens within markdown-it-xss.ts. Attackers can store a payload in their profile bio that executes when...
CVE-2026-126800 Hydro @hydrooj/ui-default before 4.59.1 Stored XSS via Markdown language- Class
Hydro @hydrooj/ui-default before 4.59.1 contains a stored cross-site scripting vulnerability that allows registered users to inject script by placing double quotes in language- class tokens within markdown-it-xss.ts. Attackers can store a payload in their profile bio that executes when...
CVE-2026-126800
The Hydro @hydrooj/ui-default package, specifically versions before 4.59.1 , is vulnerable to a stored cross-site scripting (XSS) vulnerability. The root cause is located in markdown-it-xss.ts , where the application fails to properly handle double quotes in language- class tokens. A registered u...
CVE-2026-126800: hydro-dev @hydrooj/ui-default: Hydro @hydrooj/ui-default before 4.59.1 contains a stored cross-site scripting vulnerability that allows registered…
Hydro @hydrooj/ui-default before 4.59.1 contains a stored cross-site scripting vulnerability that allows registered users to inject script by placing double quotes in language- class tokens within markdown-it-xss.ts. Attackers can store a payload in their profile bio that executes when...
PT-2026-145457
Name of the Vulnerable Software and Affected Versions @hydrooj/ui-default versions prior to 4.59.1 Description A stored cross-site scripting issue exists where registered users can inject scripts by placing double quotes in language- class tokens within markdown-it-xss.ts. An attacker can store a...
CLSA-2026-1794059936 TuxCare security update for markdown-it (5 CVEs)
TuxCare rebuilt markdown-it to address 5 CVEs. Fixed in 10.0.0-tuxcare.1...
CLSA-2026-1794058822 TuxCare security update for markdown-it (4 CVEs)
TuxCare rebuilt markdown-it to address 4 CVEs. Fixed in 14.2.0-tuxcare.1...
CLSA-2026-1793874926 TuxCare security update for markdown-it (2 CVEs)
TuxCare rebuilt markdown-it to address 2 CVEs. Fixed in 4.3.0-tuxcare.7...
CLSA-2026-1793874791 TuxCare security update for markdown-it (2 CVEs)
TuxCare rebuilt markdown-it to address 2 CVEs. Fixed in 8.4.2-tuxcare.4...
Security Bulletin: Vulnerability in markdown-it affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.
Summary Potential vulnerability in markdown-it has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...
CLEANSTART-2026-QZ30708 markdown-it is a Markdown parser
Security vulnerability affects the renovate package. markdown-it is a Markdown parser...
ROOT-APP-NPM-CVE-2026-111758 CVE-2026-111758 in markdown-it - Patched by Root
Root has patched CVE-2026-111758 in the markdown-it package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-111759 CVE-2026-111759 in markdown-it - Patched by Root
Root has patched CVE-2026-111759 in the markdown-it package for Root:npm. Multiple fixed versions available...
CLSA-2026-1793125795 TuxCare security update for markdown-it (1 CVE)
TuxCare rebuilt markdown-it to address 1 CVE. Fixed in 4.4.0-tuxcare.7...
CLSA-2026-1793102413 TuxCare security update for markdown-it (1 CVE)
TuxCare rebuilt markdown-it to address 1 CVE. Fixed in 4.4.0-tuxcare.6...