shd101wyy — Vulnerabilities & Security Advisories 9

Browse all 9 CVE security advisories affecting shd101wyy. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by shd101wyy: vscode-markdown-preview-enhanced Markdown Preview Enhanced

CVEs 9

CVE ID	Title	CVSS	Severity	Published
CVE-2026-54702	Markdown Preview Enhanced: Blind Command Dispatch via Unvalidated Webview Message Handler — vscode-markdown-preview-enhanced CWE-749	7.3	High	2026-10-14
CVE-2026-54701	Markdown Preview Enhanced: Stored XSS via Unsanitized `.crossnote/head.html` Injection in Webview — vscode-markdown-preview-enhanced CWE-79	6.9	Medium	2026-10-14
CVE-2026-54703	Markdown Preview Enhanced: Arbitrary File Write via updateMarkdown Command Without Path Validation — vscode-markdown-preview-enhanced CWE-73	5.8	Medium	2026-10-14
CVE-2026-54566	Markdown Preview Enhanced: Remote Code Execution via VM Sandbox Escape in `.crossnote/config.js` and `.crossnote/parser.js` — vscode-markdown-preview-enhanced CWE-94	8.5	High	2026-10-14
CVE-2026-54525	Markdown Preview Enhanced: One Click RCE via Markdown Link Command Injection on Windows — vscode-markdown-preview-enhanced CWE-78	8.8	High	2026-10-14
CVE-2026-11422	Markdown Preview Enhanced 0.8.x Code Injection via WaveDrom Rendering — Markdown Preview Enhanced CWE-95	7.1	High	2026-06-05
CVE-2026-50733	Markdown Preview Enhanced Arbitrary Code Execution via WaveDrom eval() — Markdown Preview Enhanced CWE-95	8.8	High	2026-06-05
CVE-2026-49493	Markdown Preview Enhanced Arbitrary Code Execution via Bitfield interpretJS() — Markdown Preview Enhanced CWE-94	8.8	High	2026-06-05
CVE-2026-49492	Markdown Preview Enhanced OS Command Injection in External File and Link Opening — Markdown Preview Enhanced CWE-78	8.8	High	2026-06-05

This page lists every published CVE security advisory associated with shd101wyy. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.