MAL-2025-25943 Malicious code in markdown-pdf-fermiparadox-eigenstate-quark (npm)

The package markdown-pdf-fermiparadox-eigenstate-quark was found to contain malicious code...

MAL-2025-26462 Malicious code in miranda-crust-markdown-pdf-chromedriver (npm)

The package miranda-crust-markdown-pdf-chromedriver was found to contain malicious code...

MAL-2025-39658 Malicious code in xenon-markdown-pdf-backend-playwright (npm)

The package xenon-markdown-pdf-backend-playwright was found to contain malicious code...

MAL-2025-27288 Malicious code in neptune-markdown-pdf-ora-dotenv-safe (npm)

The package neptune-markdown-pdf-ora-dotenv-safe was found to contain malicious code...

Malicious code in antares-interstellarmedium-biohacking-markdown-pdf (npm)

The package antares-interstellarmedium-biohacking-markdown-pdf was found to contain malicious code...

Malicious code in dotenv-safe-winston-dotenv-safe-markdown-pdf (npm)

The package dotenv-safe-winston-dotenv-safe-markdown-pdf was found to contain malicious code...

MAL-2025-25947 Malicious code in markdown-subscription-achernar-glaciology (npm)

The package markdown-subscription-achernar-glaciology was found to contain malicious code...

MAL-2025-29627 Malicious code in prettier-plugin-markdown-cz-conventional-changelog-aquarius-mira (npm)

The package prettier-plugin-markdown-cz-conventional-changelog-aquarius-mira was found to contain malicious code...

MAL-2025-39757 Malicious code in xerxes-prettier-plugin-markdown-airbnb-resolvers (npm)

The package xerxes-prettier-plugin-markdown-airbnb-resolvers was found to contain malicious code...

MAL-2025-25940 Malicious code in markdown-magnetar-neptune-ichnology (npm)

The package markdown-magnetar-neptune-ichnology was found to contain malicious code...

Malicious code in markdown-it-embed (npm)

The package markdown-it-embed was found to contain malicious code...

MAL-2025-30742 Malicious code in prompts-auth-oauth-markdown-pdf (npm)

The package prompts-auth-oauth-markdown-pdf was found to contain malicious code...

Malicious code in promise-stratosphere-prettier-plugin-markdown-proxima (npm)

The package promise-stratosphere-prettier-plugin-markdown-proxima was found to contain malicious code...

MAL-2025-30737 Malicious code in promise-stratosphere-prettier-plugin-markdown-proxima (npm)

The package promise-stratosphere-prettier-plugin-markdown-proxima was found to contain malicious code...

MAL-2025-15080 Malicious code in australis-primatology-ignite-markdown (npm)

The package australis-primatology-ignite-markdown was found to contain malicious code...

MAL-2025-29167 Malicious code in photon-antares-markdown-pdf-chakra-ui (npm)

The package photon-antares-markdown-pdf-chakra-ui was found to contain malicious code...

MAL-2025-25941 Malicious code in markdown-meissa-optimize-css-assets-webpack-plugin-odin (npm)

The package markdown-meissa-optimize-css-assets-webpack-plugin-odin was found to contain malicious code...

Malicious code in eslint-jabbah-europa-markdown (npm)

The package eslint-jabbah-europa-markdown was found to contain malicious code...

Cross-site Scripting (XSS)

Apache JSPWiki is vulnerable to Cross-site Scripting XSS. The vulnerability is due to insufficient sanitization of wiki markup and markdown header link creation because specially crafted input can execute JavaScript in the victim’s browser, enabling theft of sensitive information...

GitLab 13.2 < 18.0.6 / 18.1 < 18.1.4 / 18.2 < 18.2.2 (CVE-2025-2937)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions from 13.2 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users to create a denial o...