Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Post-loader Project Component: Post-loader Clear all filters
TI-2022-00659 CVE-2022-0748 · GHSA-66ww-999q-mffq

Arbitrary code execution in post-loader

Priority MEDIUM 46

The package post-loader from 0.0.0 are vulnerable to Arbitrary Code Execution which uses a markdown parser in an unsafe way so that any javascript code inside the markdown input files gets evaluated and executed.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02089 Published 2022-03-17 No fix listed CWE-79