vscode-markdown-preview-enhanced vulnerabilities
CVEs whose affected-version data names the vscode-markdown-preview-enhanced package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
5 CVEsRSS
CVE-2026-54703Medium· 5.8PoCMarkdown Preview Enhanced is a Markdown preview extension for Visual Studio Code
Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the _crossnote.updateMarkdown command in Markdown Preview Enhanced accepts an arbitrary URI and attacker-controlled content, then passes t…
CVE-2026-54702High· 7.3PoCMarkdown Preview Enhanced is a Markdown preview extension for Visual Studio Code
Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the webview message handler in src/preview-provider.ts accepts an attacker-controlled command value and attacker-controlled args, construc…
CVE-2026-54701Medium· 6.9PoCMarkdown Preview Enhanced is a Markdown preview extension for Visual Studio Code
Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, Markdown Preview Enhanced reads repository-controlled .crossnote/head.html content and passes it through resolvePathsInHeader before inser…
CVE-2026-54566High· 8.5PoCMarkdown Preview Enhanced is a Markdown preview extension for Visual Studio Code
Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.29, Markdown Preview Enhanced evaluates repository-controlled .crossnote/config.js and .crossnote/parser.js files with vm.runInNewContext, whi…
CVE-2026-54525High· 8.8Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code
Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.28, Markdown Preview Enhanced preview-link handling passes a decoded, Markdown-controlled link target to a Windows file-opening helper that in…