Read the docs

Hyperdown Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Hyperdown Project records in CISA KEV

No Hyperdown Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Hyperdown 1 record MEDIUM

Records

1 record

TI-2022-09415 CVE-2022-25849 · GHSA-4r9g-w48q-8jwm

Cross-site scripting (XSS) in joyqi/hyper-down

Priority MEDIUM 60

The package joyqi/hyper-down from 0.0.0 are vulnerable to Cross-site Scripting (XSS) because the module of parse markdown does not filter the href attribute very well.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0057 Published 2022-10-26 No fix listed CWE-79
Open these records in search →