4838 matches found
[SECURITY] Fedora 36 Update: ghc-cmark-gfm-0.2.3-1.fc36
This package provides Haskell bindings for , the reference parser for , a fully specified variant of Markdown. It includes sources for libcmark-gfm 0.29.0.gfm.3 and does not require prior installation of the C library...
HexoEditor Cross-Site Scripting Vulnerability (CNVD-2022-25206)
HexoEditor is an open source Markdown a markup language that can be written using a normal text editor editor optimized for Hexo a blogging framework. HexoEditor 1.1.8 contains a cross-site scripting vulnerability that can be exploited to place a common cross-site scripting payload into a...
Fedora: Security Advisory for ghostwriter (FEDORA-2022-725edc74c0)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for ghc-cmark-gfm (FEDORA-2022-bc43bafcfd)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for ghostwriter (FEDORA-2022-557ad15f2e)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 35 Update: ghostwriter-2.1.2-1.fc35
Ghostwriter is a text editor for Markdown, which is a plain text markup format created by John Gruber. For more information about Markdown, please visit John Gruber=EF=BF=BD=EF=BF=BD=EF=BF=BDs website at http://www.daringfir eball.net. Ghostwriter provides a relaxing, distraction-free writing...
[SECURITY] Fedora 35 Update: ghc-cmark-gfm-0.2.3-1.fc35
This package provides Haskell bindings for , the reference parser for , a fully specified variant of Markdown. It includes sources for libcmark-gfm 0.29.0.gfm.3 and does not require prior installation of the C library...
[SECURITY] Fedora 34 Update: ghostwriter-2.1.2-1.fc34
Ghostwriter is a text editor for Markdown, which is a plain text markup format created by John Gruber. For more information about Markdown, please visit John Gruber=EF=BF=BD=EF=BF=BD=EF=BF=BDs website at http://www.daringfir eball.net. Ghostwriter provides a relaxing, distraction-free writing...
CVE-2022-24656
HexoEditor 1.1.8 is affected by Cross Site Scripting XSS. By putting a common XSS payload in a markdown file, if opened with the app, will execute several times...
CVE-2022-24656
HexoEditor 1.1.8 is affected by Cross Site Scripting XSS. By putting a common XSS payload in a markdown file, if opened with the app, will execute several times...
CVE-2022-24656
HexoEditor 1.1.8 is affected by Cross Site Scripting XSS. By putting a common XSS payload in a markdown file, if opened with the app, will execute several times...
HexoEditor 跨站脚本漏洞
HexoEditor is an open source Markdown a markup language that can be written using a normal text editor editor optimized for Hexo a blogging framework. HexoEditor 1.1.8 contains a cross-site scripting vulnerability that can be exploited to place a common cross-site scripting payload into a...
OESA-2022-1577 obs-server security update
Security Fixes: A Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Open Build Service allows remote attackers to store JS code in markdown that is not properly escaped, impacting confidentiality and integrity. This issue affects: Open Build Servi...
GHSA-66WW-999Q-MFFQ Arbitrary code execution in post-loader
post-loader is webpack loader for blog posts written in Markdown. The package post-loader from 0.0.0 is vulnerable to Arbitrary Code Execution which uses a markdown parser in an unsafe way so that any javascript code inside the markdown input files gets evaluated and executed. At this time, there...
Arbitrary code execution in post-loader
post-loader is webpack loader for blog posts written in Markdown. The package post-loader from 0.0.0 is vulnerable to Arbitrary Code Execution which uses a markdown parser in an unsafe way so that any javascript code inside the markdown input files gets evaluated and executed. At this time, there...
CVE-2022-0748
The package post-loader from 0.0.0 are vulnerable to Arbitrary Code Execution which uses a markdown parser in an unsafe way so that any javascript code inside the markdown input files gets evaluated and executed...
Code injection
The package post-loader from 0.0.0 are vulnerable to Arbitrary Code Execution which uses a markdown parser in an unsafe way so that any javascript code inside the markdown input files gets evaluated and executed...
CVE-2022-0748 Arbitrary Code Execution
The package post-loader from 0.0.0 are vulnerable to Arbitrary Code Execution which uses a markdown parser in an unsafe way so that any javascript code inside the markdown input files gets evaluated and executed...
CVE-2022-0748
CVE-2022-0748 affects the post-loader package (Webpack loader for Markdown blog posts). The root cause is unsafe handling of a Markdown parser which allows JavaScript in Markdown inputs to be evaluated and executed, enabling arbitrary code execution. Affected versions are 0.0.0 and later. Public ...
CVE-2022-0748 Arbitrary Code Execution
The package post-loader from 0.0.0 are vulnerable to Arbitrary Code Execution which uses a markdown parser in an unsafe way so that any javascript code inside the markdown input files gets evaluated and executed...