Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:typora:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductTypora (16852cdf-b926-5c88-b58a-8b5c30134dd2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-14010 vulnerable 2026-06-08 06:25:38.891580 Typora 1.7.4 OS Command Injection via Export PDF Preferences
CRITICAL (9.8)
Typora 1.7.4 contains a command injection vulnerability in the PDF export preferences that allows attackers to execute arbitrary system commands. Attackers can inject malicious commands into the 'run command' input field during PDF export to achieve remote code execution.
Published: 2025-12-12T19:55:03.584Z
Updated: 2026-04-07T14:08:28.519Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.