CVE-2021-23342

The CVE-2021-23342 entry concerns docsify before version 4.12.0, where a bypass of CVE-2020-7680 allows cross-site scripting. The vulnerability arises because HTML sanitization performed for remote URLs on the main page is not applied in the sidebar, and the isURL external check can be bypassed b...

CVE-2021-30074

CVE-2021-30074 affects docsify 4.12.1 and earlier, with a Cross Site Scripting (XSS) vulnerability in the search component due to improper encoding of code blocks and mishandling of the quote character. The issue is documented across multiple sources (GHSA, Red Hat, OSV, CVE records) and confirms...