MAL-2025-45585 Malicious code in prettier-plugin-markdown-europa-spawn-csv (npm)

The package prettier-plugin-markdown-europa-spawn-csv was found to contain malicious code...

Malicious code in jasmine-geochemistry-markdown-sirius (npm)

The package jasmine-geochemistry-markdown-sirius was found to contain malicious code...

Malicious code in prettier-plugin-markdown-sadr-loop-decoherence (npm)

The package prettier-plugin-markdown-sadr-loop-decoherence was found to contain malicious code...

Malicious code in request-fork-markdown-pdf-elektra (npm)

The package request-fork-markdown-pdf-elektra was found to contain malicious code...

Malicious code in react-bootstrap-fornax-deimos-prettier-plugin-markdown (npm)

The package react-bootstrap-fornax-deimos-prettier-plugin-markdown was found to contain malicious code...

MAL-2025-46149 Malicious code in string-stratigraphy-alphard-markdown (npm)

The package string-stratigraphy-alphard-markdown was found to contain malicious code...

MAL-2025-45586 Malicious code in prettier-plugin-markdown-global-algol-taphonomy (npm)

The package prettier-plugin-markdown-global-algol-taphonomy was found to contain malicious code...

MAL-2025-45939 Malicious code in sadr-multiverse-markdown-xo (npm)

The package sadr-multiverse-markdown-xo was found to contain malicious code...

CVE-2025-58358 Markdownify is vulnerable to command injection through pptx-to-markdown tool

Markdownify is a Model Context Protocol server for converting almost anything to Markdown. Versions below 0.0.2 contain a command injection vulnerability, caused by the unsanitized use of input parameters within a call to childprocess.exec, enabling an attacker to inject arbitrary system commands...

CVE-2025-55474

Many Notes 0.10.1 is vulnerable to Cross Site Scripting XSS, which allows malicious Markdown files to execute JavaScript when viewed...

GHSA-45QJ-4XQ3-3C45 mcp-markdownify-server vulnerable to command injection in pptx-to-markdown tool

Summary A command injection vulnerability exists in the mcp-markdownify-server MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to childprocess.exec, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remot...

CVE-2025-55474

Many Notes 0.10.1 is vulnerable to Cross Site Scripting XSS, which allows malicious Markdown files to execute JavaScript when viewed...

CVE-2025-55474

Many Notes 0.10.1 is vulnerable to Cross Site Scripting (XSS) via Markdown rendering, allowing JavaScript execution when viewed. CVSS v3.1 vector: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N (base 6.1, MEDIUM). Connected sources reference a potential fix in v0.10.2, but explicit remediation details are n...

many-notes 安全漏洞

many-notes is a Markdown reader by Bruno Personal Developer. A security vulnerability exists in many-notes version 0.10.1, which stems from improper handling of Markdown files and could lead to cross-site scripting attacks...

Linux Distros Unpatched Vulnerability : CVE-2021-43813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Grafana is an open-source platform for monitoring and observability. Grafana prior to versions 8.3.2 and 7.5.12 contains a directory traversal vulnerability for...

CVE-2025-55474

Many Notes 0.10.1 is vulnerable to Cross Site Scripting XSS, which allows malicious Markdown files to execute JavaScript when viewed...

CVE-2025-55474

Many Notes 0.10.1 is vulnerable to Cross Site Scripting XSS, which allows malicious Markdown files to execute JavaScript when viewed...

PT-2025-35585

Name of the Vulnerable Software and Affected Versions: Many Notes version 0.10.1 Description: Many Notes version 0.10.1 is susceptible to Cross Site Scripting XSS. This allows malicious Markdown files to execute JavaScript when viewed. Recommendations: At the moment, there is no information about...

CVE-2025-55474

Many Notes 0.10.1 is vulnerable to Cross Site Scripting XSS, which allows malicious Markdown files to execute JavaScript when viewed...

Linux Distros Unpatched Vulnerability : CVE-2025-2937

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions from 13.2 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed...