Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-25849

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-4r9g-w48q-8jwm

HyperDown vulnerable to Cross-site Scripting HyperDown is a markdown parser written for the Chinese website SegmentFault. Improper validation of the href attribute allows for Cross-site Scripting. At publication there are no patched versions, and no known workarounds.

gitlab/npm/hyperdown/CVE-2022-25849

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') The package joyqi/hyper-down from 0.0.0 is vulnerable to Cross-site Scripting (XSS) because the module of parse markdown does not filter the href attribute very well.

gitlab/packagist/joyqi/hyper-down/CVE-2022-25849

HyperDown vulnerable to Cross-site Scripting The package joyqi/hyper-down from 0.0.0 is vulnerable to Cross-site Scripting (XSS) because the module of parse markdown does not filter the href attribute very well.