PT-2024-25191 · Typora · Typora

Name of the Vulnerable Software and Affected Versions: Typora versions 1.0.0 through 1.7 Description: The issue is related to a cross-site scripting XSS vulnerability in the Markdown editor, which allows attackers to execute arbitrary code by uploading Markdown files. Recommendations: For version...

PT-2024-24205 · Typora · Typora

Name of the Vulnerable Software and Affected Versions: Typora versions 1.8.10 and earlier Description: An issue in Typora allows a local attacker to obtain sensitive information and execute arbitrary code via a crafted payload to the src component. Recommendations: For Typora versions 1.8.10 and...