commenthol

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

commenthol records in CISA KEV

No commenthol vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Md-fileserver 1 record HIGH

Records

3 records

TI-2026-34191 CVE-2026-46492 · GHSA-32q2-hhr5-6qvv

md-fileserver: Stored/Reflected XSS when viewing Markdown (raw HTML allowed)

HIGH 71

md-fileserver allows for local viewing of markdown files in a browser.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00232 Published 2026-06-09 Fixed in 1.10.3 CWE-80

TI-2023-11076 CVE-2023-25805 · GHSA-fj78-2vc5-f6cm

versionn Command Injection Vulnerability

MEDIUM 52

versionn, software for changing version information across multiple files, has a command injection vulnerability in all versions prior to version 1.1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01584 Published 2023-02-20 Fixed in 1.1.0 CWE-77

TI-2019-12553 CVE-2019-16772 · GHSA-3fjq-93xj-3f3f

regular expressions Cross-Site Scripting (XSS) vulnerability in serialize-to-js

LOW 28

The serialize-to-js NPM package before version 3.0.1 is vulnerable to Cross-site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00646 Published 2019-12-06 Fixed in 3.0.1 CWE-79

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0