Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-4r9g-w48q-8jwm

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-4r9g-w48q-8jwm

HyperDown vulnerable to Cross-site Scripting HyperDown is a markdown parser written for the Chinese website SegmentFault. Improper validation of the href attribute allows for Cross-site Scripting. At publication there are no patched versions, and no known workarounds.

gitlab/packagist/joyqi/hyper-down/CVE-2022-25849

HyperDown vulnerable to Cross-site Scripting The package joyqi/hyper-down from 0.0.0 is vulnerable to Cross-site Scripting (XSS) because the module of parse markdown does not filter the href attribute very well.