Skip to content
OpenAdvisories

Vendor

shd101wyy

9 known vulnerabilities.

Products

vscode-markdown-preview-enhanced 5 Markdown Preview Enhanced 4 crossnote 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-54701

    Markdown Preview Enhanced: Stored XSS via Unsanitized `.crossnote/head.html` Injection in Webview

    Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, Markdown Preview Enhanced reads repository-controlled .crossnote/head.html content and passes it through resolvePathsInHeader before inserting it into the head …

    shd101wyy vscode-markdown-preview-enhanced
  • Medium 5.8
    CVE-2026-54703

    Markdown Preview Enhanced: Arbitrary File Write via updateMarkdown Command Without Path Validation

    Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the _crossnote.updateMarkdown command in Markdown Preview Enhanced accepts an arbitrary URI and attacker-controlled content, then passes them to vscode.workspac…

    shd101wyy vscode-markdown-preview-enhanced