Skip to content
Shd101wyy vulnerabilities
Newest
-
shd101wyy vscode-markdown-preview-enhanced
Markdown Preview Enhanced: Blind Command Dispatch via Unvalidated Webview Message Handler
CVE-2026-54702
7.3 High
-
shd101wyy vscode-markdown-preview-enhanced
Markdown Preview Enhanced: Stored XSS via Unsanitized `.crossnote/head.html` Injection in Webview
CVE-2026-54701
6.9 Medium
-
shd101wyy vscode-markdown-preview-enhanced
Markdown Preview Enhanced: Arbitrary File Write via updateMarkdown Command Without Path Validation
CVE-2026-54703
5.8 Medium
-
shd101wyy vscode-markdown-preview-enhanced
Markdown Preview Enhanced: Remote Code Execution via VM Sandbox Escape in `.crossnote/config.js` and `.crossnote/parser.js`
CVE-2026-54566
8.5 High
-
shd101wyy vscode-markdown-preview-enhanced
Markdown Preview Enhanced: One Click RCE via Markdown Link Command Injection on Windows
CVE-2026-54525
8.8 High
-
shd101wyy crossnote, markdown preview enhanced +1 more
Markdown Preview Enhanced 0.8.x Code Injection via WaveDrom Rendering
CVE-2026-11422
8.4 High
-
shd101wyy markdown preview enhanced
Markdown Preview Enhanced Arbitrary Code Execution via WaveDrom eval()
CVE-2026-50733
8.6 High
-
shd101wyy markdown preview enhanced
Markdown Preview Enhanced Arbitrary Code Execution via Bitfield interpretJS()
CVE-2026-49493
8.6 High
-
shd101wyy markdown preview enhanced
Markdown Preview Enhanced OS Command Injection in External File and Link Opening
CVE-2026-49492
Public exploit
8.6 High
-
shd101wyy markdown preview enhanced
An issue in Visual Studio Code Extensions Markdown Preview Enhanced v0.8.18 allows attackers to...
CVE-2025-65716
8.8 High