6309 matches found
MAL-2025-43612 Malicious code in betelgeuse-eslint-config-markdown-pdf-native (npm)
The package betelgeuse-eslint-config-markdown-pdf-native was found to contain malicious code...
MAL-2025-45492 Malicious code in oscillation-prettier-plugin-markdown-joviology-cluster (npm)
The package oscillation-prettier-plugin-markdown-joviology-cluster was found to contain malicious code...
MAL-2025-45587 Malicious code in prettier-plugin-markdown-regulus-halley-commitlint-config-angular (npm)
The package prettier-plugin-markdown-regulus-halley-commitlint-config-angular was found to contain malicious code...
MAL-2025-45585 Malicious code in prettier-plugin-markdown-europa-spawn-csv (npm)
The package prettier-plugin-markdown-europa-spawn-csv was found to contain malicious code...
MAL-2025-46090 Malicious code in slides-json-markdown-uglify-js (npm)
The package slides-json-markdown-uglify-js was found to contain malicious code...
Malicious code in hyperion-markdown-pdf-supervisor-selenium (npm)
The package hyperion-markdown-pdf-supervisor-selenium was found to contain malicious code...
MAL-2025-45759 Malicious code in react-bootstrap-fornax-deimos-prettier-plugin-markdown (npm)
The package react-bootstrap-fornax-deimos-prettier-plugin-markdown was found to contain malicious code...
MAL-2025-43755 Malicious code in chai-prettier-plugin-markdown-weywot-ichnology (npm)
The package chai-prettier-plugin-markdown-weywot-ichnology was found to contain malicious code...
CVE-2025-58358 Markdownify is vulnerable to command injection through pptx-to-markdown tool
Markdownify is a Model Context Protocol server for converting almost anything to Markdown. Versions below 0.0.2 contain a command injection vulnerability, caused by the unsanitized use of input parameters within a call to childprocess.exec, enabling an attacker to inject arbitrary system commands...
CVE-2025-55474
Many Notes 0.10.1 is vulnerable to Cross Site Scripting XSS, which allows malicious Markdown files to execute JavaScript when viewed...
GHSA-45QJ-4XQ3-3C45 mcp-markdownify-server vulnerable to command injection in pptx-to-markdown tool
Summary A command injection vulnerability exists in the mcp-markdownify-server MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to childprocess.exec, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remot...
CVE-2025-55474
Many Notes 0.10.1 is vulnerable to Cross Site Scripting XSS, which allows malicious Markdown files to execute JavaScript when viewed...
CVE-2025-55474
Many Notes 0.10.1 is vulnerable to Cross Site Scripting XSS, which allows malicious Markdown files to execute JavaScript when viewed...
Linux Distros Unpatched Vulnerability : CVE-2021-43813
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Grafana is an open-source platform for monitoring and observability. Grafana prior to versions 8.3.2 and 7.5.12 contains a directory traversal vulnerability for...
CVE-2025-55474
Many Notes 0.10.1 is vulnerable to Cross Site Scripting XSS, which allows malicious Markdown files to execute JavaScript when viewed...
PT-2025-35585
Name of the Vulnerable Software and Affected Versions: Many Notes version 0.10.1 Description: Many Notes version 0.10.1 is susceptible to Cross Site Scripting XSS. This allows malicious Markdown files to execute JavaScript when viewed. Recommendations: At the moment, there is no information about...
CVE-2025-55474
Many Notes 0.10.1 is vulnerable to Cross Site Scripting XSS, which allows malicious Markdown files to execute JavaScript when viewed...
many-notes 安全漏洞
many-notes is a Markdown reader by Bruno Personal Developer. A security vulnerability exists in many-notes version 0.10.1, which stems from improper handling of Markdown files and could lead to cross-site scripting attacks...
CVE-2025-55474
Many Notes version 0.10.1 is vulnerable to Cross-Site Scripting (XSS) due to improper handling of Markdown files. This flaw allows malicious Markdown files to execute JavaScript when viewed by a user. While the documents confirm the vulnerability exists, there is currently no information provided...
