Vulnerabilities in shd101wyy

9 results

CVE-2026-50733HIGHMarkdown Preview Enhanced Arbitrary Code Execution via WaveDrom eval()EPSS 0.6%CVE-2026-49493HIGHMarkdown Preview Enhanced Arbitrary Code Execution via Bitfield interpretJS()EPSS 0.6%CVE-2026-49492HIGHMarkdown Preview Enhanced OS Command Injection in External File and Link OpeningEPSS 0.5%CVE-2026-54525HIGHMarkdown Preview Enhanced: One Click RCE via Markdown Link Command Injection on WindowsEPSS 0.4%CVE-2026-54566HIGHMarkdown Preview Enhanced: Remote Code Execution via VM Sandbox Escape in `.crossnote/config.js` and `.crossnote/parser.js`EPSS 0.3%CVE-2026-54703MEDIUMMarkdown Preview Enhanced: Arbitrary File Write via updateMarkdown Command Without Path ValidationEPSS 0.2%CVE-2026-54702HIGHMarkdown Preview Enhanced: Blind Command Dispatch via Unvalidated Webview Message HandlerEPSS 0.2%CVE-2026-54701MEDIUMMarkdown Preview Enhanced: Stored XSS via Unsanitized `.crossnote/head.html` Injection in WebviewEPSS 0.2%CVE-2026-11422HIGHMarkdown Preview Enhanced 0.8.x Code Injection via WaveDrom RenderingEPSS 0.2%