Read the docs

Yuin

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Yuin records in CISA KEV

No Yuin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Goldmark 1 record LOW

Records

1 record in Goldmark · all components

TI-2026-04504 CVE-2026-5160 · GHSA-c97m-vxhj-p7j6

Cross-site scripting in github.com/yuin/goldmark/renderer/html

Priority LOW 23

Versions of the package github.com/yuin/goldmark/renderer/html before 1.7.17 are vulnerable to Cross-site Scripting (XSS) due to improper ordering of URL validation and normalization.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00287 Published 2026-04-15 Partial fix · 1.7.17 CWE-79
Open these records in search →