answer-me-with-html vulnerabilities

CVEs whose affected-version data names the answer-me-with-html package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-108723Low· 2.5

2w ago

answer-me-with-html through 0.5.0 contains a link following vulnerability in the am CLI code block src= embedding, where localPath() checks only path text without resolving symlinks

answer-me-with-html through 0.5.0 contains a link following vulnerability in the am CLI code block src= embedding, where localPath() checks only path text without resolving symlinks. Attackers can ship a repository with a symlink pointin…

▾ SunlitQingYunA · answer-me-with-htmlEPSS 0.14%via NVD