88250/lute

88250/lute

GitHubGitHub
GitHubgithub.com
ld246.comld246.com
Releases56
Frequency3 weeks 5 days
Last Release
Stars1.65K
🎼 一款结构化的 Markdown 引擎，支持 Go 和 JavaScript。A structured Markdown engine that supports Go and JavaScript.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2026-25647↗
4.6 MEDIUM—

Lute is a structured Markdown engine supporting Go and JavaScript. Lute 1.7.6 and earlier (as used in SiYuan before) has a Stored Cross-Site Scripting (XSS) vulnerability in the Markdown rendering engine. An attacker can inject malicious JavaScript into a Markdown text/note. When another user clicks the rendered content, the script executes in the context of their session.