Skip to content
OpenAdvisories

Package · npm

@nuxtjs/mdc

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-63671

    @nuxtjs/mdc: the URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown at the default configuration

    MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. Prior to 0.22.1, @nuxtjs/mdc uses parseMarkdown with allowDangerousHtml enabled by default and relies on validateProps, validateProp, and unsafeLinkPrefix to r…

    nuxt-content mdc @nuxtjs/mdc npm
  • High 8.3
    CVE-2025-54075

    mdc vulnerable to XSS in markdown rendering bypassing HTML filter. (N°4)

    MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. Prior to version 0.17.2, a remote script-inclusion / stored cross-site scripting vulnerability in @nuxtjs/mdc lets a Markdown author inject a `<base href="http…

    nuxt-modules mdc @nuxtjs/mdc npm