Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-46654
4.9
MEDIUMCVSS v3
Published
April 26, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
CodiMD through 2.2.0 has a CSP-based protection mechanism against XSS through uploaded JavaScript content, but it can be bypassed by uploading a .html file that references an uploaded .js file.
hackmdio/codimd
GitHubCodiMD - Realtime collaborative markdown notes on all platforms.
GitHubCodiMD - Realtime collaborative markdown notes on all platforms.= *, <= 2.2.0NVD