Skip to content
OpenAdvisories

Vendor

Typora

5 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • Medium 6.3

    Typora Local File Disclosure

    Improper path handling in Typora before 1.7.0-dev on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/typemark/". This vulnerability can be exploited if a user opens a malicious markd…

  • Medium 6.1

    Typora versions prior to 1.4.4 fails to properly neutralize JavaScript code, which may result in executing JavaScript c…