Approved changes feed: RSS · Atom

cpe:2.3:a:quasar:qmarkdown:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorQuasar (d7626291-31df-5970-8a11-921589e71837)
ProductQmarkdown (bcd7a8e3-99d3-56e8-b8ea-1260cc538b7a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/quasarframework/quasar-ui-qmarkdown purl2cpe 2026-06-01 10:12:28.971326
pkg:npm/%40quasar/quasar-ui-qmarkdown purl2cpe 2026-06-01 10:12:28.971330

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-43954 vulnerable 2026-06-08 07:25:10.498506 Details available
MEDIUM (4.9)
QMarkdown (aka quasar-ui-qmarkdown) before 2.0.5 allows XSS via headers even when when no-html is set.
Published: 2025-04-20T00:00:00.000Z
Updated: 2025-04-21T13:43:34.198Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.