Approved changes feed: RSS · Atom
cpe:2.3:a:typora:typora:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Typora (764dd411-106d-5b35-a6ac-a9bc0f7c334e) |
|---|---|
| Product | Typora (48cd8f71-8fae-518c-a747-deaf1452b47a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-41482 |
vulnerable | 2026-06-08 06:43:54.549780 |
Details available
Typora before 1.9.3 Markdown editor has a cross-site scripting (XSS) vulnerability via the MathJax component.
Published: 2024-08-08T00:00:00.000Z
Updated: 2025-03-25T16:30:47.296Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41481 |
vulnerable | 2026-06-08 06:43:54.549193 |
Details available
Typora before 1.9.3 Markdown editor has a cross-site scripting (XSS) vulnerability via the Mermaid component.
Published: 2024-08-08T00:00:00.000Z
Updated: 2025-03-20T13:16:49.876Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33300 |
vulnerable | 2026-06-08 06:37:31.011050 |
Details available
Typora v1.0.0 through v1.7 version (below) Markdown editor has a cross-site scripting (XSS) vulnerability, which allows attackers to execute arbitrary code by uploading Markdown files.
Published: 2024-05-01T00:00:00.000Z
Updated: 2024-08-02T02:27:53.567Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31784 |
vulnerable | 2026-06-08 06:35:32.100014 |
Details available
An issue in Typora v.1.8.10 and before, allows a local attacker to obtain sensitive information and execute arbitrary code via a crafted payload to the src component.
Published: 2024-04-16T00:00:00.000Z
Updated: 2024-08-02T01:59:50.053Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31783 |
vulnerable | 2026-06-08 06:35:32.098739 |
Details available
Cross Site Scripting (XSS) vulnerability in Typora v.1.6.7 and before, allows a local attacker to obtain sensitive information via a crafted script during markdown file creation.
Published: 2024-04-16T00:00:00.000Z
Updated: 2025-03-13T15:28:49.742Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39703 |
vulnerable | 2026-06-08 06:09:37.951833 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2971 |
vulnerable | 2026-06-08 06:02:43.721499 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2317 |
vulnerable | 2026-06-08 06:02:42.056365 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2316 |
vulnerable | 2026-06-08 06:02:42.055605 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1003 |
vulnerable | 2026-06-08 05:52:33.605637 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43668 |
vulnerable | 2026-06-08 05:49:33.706302 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40011 |
vulnerable | 2026-06-08 05:48:22.819391 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-18221 |
vulnerable | 2026-06-08 05:20:56.911976 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7296 |
vulnerable | 2026-06-08 05:14:14.203495 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7295 |
vulnerable | 2026-06-08 05:14:14.203091 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20374 |
vulnerable | 2026-06-08 05:13:40.503587 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.