Skip to content
OpenAdvisories

Package · Packagist

joyqi/hyper-down

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2022-25849

    Cross-site Scripting (XSS)

    The package joyqi/hyper-down from 0.0.0 are vulnerable to Cross-site Scripting (XSS) because the module of parse markdown does not filter the href attribute very well.

    joyqi/hyper-down Packagist