Read the docs

Post-loader Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Post-loader Project records in CISA KEV

No Post-loader Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Post-loader 1 record MEDIUM

Records

1 record in Post-loader · all components

TI-2022-00659 CVE-2022-0748 · GHSA-66ww-999q-mffq

Arbitrary code execution in post-loader

Priority MEDIUM 46

The package post-loader from 0.0.0 are vulnerable to Arbitrary Code Execution which uses a markdown parser in an unsafe way so that any javascript code inside the markdown input files gets evaluated and executed.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02089 Published 2022-03-17 No fix listed CWE-79
Open these records in search →