Lucene search
Veracode Vulnerability DatabaseVERACODE:36848HistoryAug 30, 2022 - 7:20 a.m.
Code Injection
2022-08-3007:20:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
code injection
mdx-mermaid
vulnerability
input validation
arbitrary code
0.0005 Low
EPSS
Percentile
17.8%
mdx-mermaid is vulnerable to code injection. The vulnerability exists in mermaid code blocks due to a lack of input validation allowing an attacker to inject and execute arbitrary codes.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mdx-mermaid | le | 2.0.0-rc1 | |
| mdx-mermaid | le | 1.2.3 | |
| mdx-mermaid | le | 2.0.0-rc1 | |
| mdx-mermaid | le | 1.2.3 |
Related
prion
prion
Code injection
2022-08-29 18:15:00
nvd
nvd
CVE-2022-36036
2022-08-29 18:15:09
osv
osv
CVE-2022-36036
2022-08-29 18:15:09
Improper Control of Generation of Code ('Code Injection') in mdx-mermaid
2022-08-31 22:26:11
cvelist
cvelist
cve
cve
CVE-2022-36036
2022-08-29 18:15:09
github
github
Improper Control of Generation of Code ('Code Injection') in mdx-mermaid
2022-08-31 22:26:11