Skip to content
OpenAdvisories
Medium · 6.1 CVE-2022-43668 EUVD-2022-46663GHSA-7j6m-43f8-jqqm

Typora versions prior to 1.4.4 fails to properly neutralize JavaScript code, which may result in executing JavaScript code contained in the…

Published Dec 7, 2022 · Updated Apr 23, 2025 · Assigned by jpcert

Vendor: Typora Product: Typora

Description

Typora versions prior to 1.4.4 fails to properly neutralize JavaScript code, which may result in executing JavaScript code contained in the file when opening a file with the affected product.

Affected products

VendorProductAffectedFixed
Typora Typora versions prior to 1.4.4 —

References