Approved changes feed: RSS · Atom

cpe:2.3:a:hackmd:codimd:1.3.1:*:*:*:-:*:*:*

part: a version: 1.3.1 update: *

VendorHackmd (2c419879-33a2-5cd2-996b-3408c28fd1ec)
ProductCodimd (321e42f3-11c1-5b7d-8458-c23db1d6a084)
Edition*
Language*
Software edition-
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/hackmdio/codimd purl2cpe 2026-06-01 10:16:04.400243

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-15499 vulnerable 2026-06-08 05:12:57.492142 Details available
CodiMD 1.3.1, when Safari is used, allows XSS via an IFRAME element with allow-top-navigation in the sandbox attribute, in conjunction with a data: URL.
Published: 2019-08-23T03:19:57.000Z
Updated: 2024-08-05T00:49:13.552Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.