Skip to content
OpenAdvisories

Product · shd101wyy

crossnote

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-11422

    Markdown Preview Enhanced 0.8.x Code Injection via WaveDrom Rendering

    Markdown Preview Enhanced 0.8.x with crossnote engine 0.9.28 contains a code injection vulnerability in the WaveDrom rendering pipeline that allows attackers to execute arbitrary JavaScript by embedding malicious content in a wavedrom fenced code block within…

    shd101wyy Markdown Preview Enhanced crossnote