Shd101wyy

10 CVEs in 4 Shd101wyy products, including Vscode-Markdown-Preview-Enhanced, Markdown Preview Enhanced, Crossnote. Newest: CVE-2026-54703 (2026-10-14).

Shd101wyy products with known CVEs

ProductCVEs
Vscode-Markdown-Preview-Enhanced5
Markdown Preview Enhanced4
Crossnote1
Markdown Preview Enhanced1
Shd101wyy CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-547032026-10-14Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the _crossnote.updateMarkdown command in Markdown Preview En…
CVE-2026-547022026-10-14Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the webview message handler in src/preview-provider.ts accep…
CVE-2026-547012026-10-14Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, Markdown Preview Enhanced reads repository-controlled .cross…
CVE-2026-545662026-10-14Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.29, Markdown Preview Enhanced evaluates repository-controlled .c…
CVE-2026-54525High8.82026-10-14Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.28, Markdown Preview Enhanced preview-link handling passes a dec…
CVE-2026-11422High7.12026-06-05Markdown Preview Enhanced 0.8.x with crossnote engine 0.9.28 contains a code injection vulnerability in the WaveDrom rendering pipeline that allows attackers t…
CVE-2026-50733High8.82026-06-05Markdown Preview Enhanced before 0.8.28 parses WaveDrom diagrams by evaluating untrusted markdown content with eval(), allowing arbitrary JavaScript execution…
CVE-2026-49493High8.82026-06-05Markdown Preview Enhanced before 0.8.28 parses Bitfield fenced code blocks with interpretJS(), which evaluates the block content as code via vm.runInNewContext…
CVE-2026-49492High8.82026-06-05Markdown Preview Enhanced before 0.8.28 opens external files and links from the preview through a shell and does not validate untrusted inputs taken from the m…
CVE-2025-65716High8.82026-02-16An issue in Visual Studio Code Extensions Markdown Preview Enhanced v0.8.18 allows attackers to execute arbitrary code via uploading a crafted .Md file.