Vulnerabilities

TI-2026-34191 CVE-2026-46492 · GHSA-32q2-hhr5-6qvv

md-fileserver: Stored/Reflected XSS when viewing Markdown (raw HTML allowed)

HIGH 71

md-fileserver allows for local viewing of markdown files in a browser.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00232 Published 2026-06-09 Fixed in 1.10.3 CWE-80

TI-2023-11076 CVE-2023-25805 · GHSA-fj78-2vc5-f6cm

versionn Command Injection Vulnerability

MEDIUM 52

versionn, software for changing version information across multiple files, has a command injection vulnerability in all versions prior to version 1.1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01584 Published 2023-02-20 Fixed in 1.1.0 CWE-77

TI-2019-12553 CVE-2019-16772 · GHSA-3fjq-93xj-3f3f

regular expressions Cross-Site Scripting (XSS) vulnerability in serialize-to-js

LOW 28

The serialize-to-js NPM package before version 3.0.1 is vulnerable to Cross-site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00646 Published 2019-12-06 Fixed in 3.0.1 CWE-79

Vulnerabilities

Filters

md-fileserver: Stored/Reflected XSS when viewing Markdown (raw HTML allowed)

versionn Command Injection Vulnerability

regular expressions Cross-Site Scripting (XSS) vulnerability in serialize-to-js