All 3 CVE vulnerabilities found in mdc, with AI-generated Chinese analysis, references, and POCs.
Vendor: nuxt-modules
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-63671 | @nuxtjs/mdc: the URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown at the default configuration CWE-79 | 8.1 | High | 2026-09-16 |
| CVE-2025-54075 | mdc vulnerable to XSS in markdown rendering bypassing HTML filter. (N°4) CWE-79 | 8.3 | High | 2025-07-18 |
| CVE-2025-24981 | Parsed HTML anchor links in Markdown provided to parseMarkdown can result in XSS in @nuxtjs/mdc CWE-79 | 9.3 | Critical | 2025-02-06 |
All 3 known CVE vulnerabilities affecting mdc with full Chinese analysis, references, and POCs where available.