Approved changes feed: RSS · Atom

cpe:2.3:a:markdown-to-jsx:markdown-to-jsx:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMarkdown To Jsx (33a728aa-1ec8-52d4-96f2-1f78cb90d7e7)
ProductMarkdown To Jsx (78d53495-865e-50bb-985d-c787568aed91)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-21535 vulnerable 2026-06-08 06:27:35.505263 Details available
MEDIUM (6.1)
Versions of the package markdown-to-jsx before 7.4.0 are vulnerable to Cross-site Scripting (XSS) via the src property due to improper input sanitization. An attacker can execute arbitrary code by injecting a malicious iframe element in the markdown.
Published: 2024-10-15T05:00:03.815Z
Updated: 2024-10-15T14:02:35.726Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.