Vendor

diplodoc-platform

1 known vulnerabilities.

Products

@diplodoc/search-extension 1

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.4

CVE-2026-40201

@diplodoc/search-extension allows stored XSS via Markdown file title

@diplodoc/search-extension 1.0.0 through 3.x before 3.0.3 allows stored XSS via the title in a .md file.

diplodoc-platform @diplodoc/search-extension @diplodoc/search-extension npm

May 1, 2026