Skip to content
OpenAdvisories

Vendor

shd101wyy

9 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-49492 Public exploit

    Markdown Preview Enhanced OS Command Injection in External File and Link Opening

    Markdown Preview Enhanced before 0.8.28 opens external files and links from the preview through a shell and does not validate untrusted inputs taken from the markdown document - the diagram filename attribute, imported file paths, and the latex_engine code-ch…