Typora vulnerabilities

Products

• Typora 24

Newest

• typora Typora 1.7.4 OS Command Injection via Export PDF Preferences CVE-2024-14010 8.5 HighDecember 12, 2025
• typora Typora before 1.9.3 Markdown editor has a cross-site scripting (XSS) vulnerability via the... CVE-2024-41482 6.1 MediumAugust 8, 2024
• typora Typora before 1.9.3 Markdown editor has a cross-site scripting (XSS) vulnerability via the... CVE-2024-41481 6.1 MediumAugust 8, 2024
• typora Typora v1.0.0 through v1.7 version (below) Markdown editor has a cross-site scripting (XSS)... CVE-2024-33300 7.3 HighMay 1, 2024
• appmakes.io typora An issue in Typora v.1.8.10 and before, allows a local attacker to obtain sensitive information... CVE-2024-31784 6.1 MediumApril 16, 2024
• typora Cross Site Scripting (XSS) vulnerability in Typora v.1.6.7 and before, allows a local attacker to... CVE-2024-31783 6.1 MediumApril 16, 2024
• typora Cross Site Scripting (XSS) vulnerability found in Typora v.0.9.65 allows a remote attacker to... CVE-2020-18336 7.4 HighOctober 10, 2023
• typora A cross site scripting (XSS) vulnerability in the Markdown Editor component of Typora v1.6.7... CVE-2023-39703 6.1 MediumSeptember 1, 2023
• typora Typora Local File Disclosure CVE-2023-2971 6.3 MediumAugust 19, 2023
• typora Typora DOM-Based Cross-site Scripting leading to Remote Code Execution CVE-2023-2317 8.6 HighAugust 19, 2023
• typora Typora Local File Disclosure CVE-2023-2316 7.4 HighAugust 19, 2023
• typora Cross Site Scripting vulnerability in Typora v.0.9.79 allows a remote attacker to execute... CVE-2020-21058 6.1 MediumJune 20, 2023
• typora Typora WSH JScript code injection CVE-2023-1003 5.3 MediumFebruary 24, 2023
• typora Cross Site Scripting (XSS) vulnerability in typora through 1.38 allows remote attackers to run... CVE-2022-40011 6.1 MediumDecember 23, 2022
• typora Typora versions prior to 1.4.4 fails to properly neutralize JavaScript code, which may result in... CVE-2022-43668 6.1 MediumDecember 7, 2022
• typora Cross Site Scripting (XSS) in Typora v0.9.65 allows attackers to execute arbitrary code via... CVE-2020-18748 6.1 MediumAugust 19, 2021
• typora Cross Site Scripting (XSS) in Typora v0.9.65 and earlier allows remote attackers to execute... CVE-2020-18221 6.1 MediumMay 26, 2021
• typora An issue was discovered in Typora 0.9.67. There is an XSS vulnerability that causes Remote Code... CVE-2020-18737 6.1 MediumFebruary 5, 2021
• typora A mutation cross-site scripting (XSS) issue in Typora through 0.9.9.31.2 on macOS and through 0.9... CVE-2019-20374 8.3 HighJanuary 9, 2020
• typora Typora 0.9.9.21.1 (1913) allows arbitrary code execution via a modified file: URL syntax in the... CVE-2019-12172 7.8 HighMay 17, 2019
• typora Typora 0.9.9.24.6 on macOS allows directory traversal, for execution of arbitrary programs, via a... CVE-2019-12137 Public exploit 7.8 HighMay 16, 2019
• typora typora through 0.9.64 has XSS, with resultant remote command execution, during inline rendering... CVE-2019-7296 6.1 MediumJanuary 31, 2019
• typora typora through 0.9.63 has XSS, with resultant remote command execution, during block rendering of... CVE-2019-7295 6.1 MediumJanuary 31, 2019
• typora typora through 0.9.9.20.3 beta has XSS, with resultant remote command execution, via the left... CVE-2019-6803 6.1 MediumJanuary 25, 2019