https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T23:49:06.838425+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-53080 EUVD-2026-53080 2026-10-18T23:49:06.882908+00:00 EUVD-2026-53080 https://cve.radiocsirt.org/vuln/fkie_cve-2019-9737 fkie_cve-2019-9737 2026-10-18T23:49:06.882943+00:00

Editor.md 1.5.0 has DOM-based XSS via vectors involving the '<EMBED SRC="data:image/svg+xml' substring.

 https://cve.radiocsirt.org/vuln/ghsa-2j5v-fc74-j9q2 GHSA-2j5v-fc74-j9q2 — Cross-Site Scripting in editor.md 2026-10-18T23:49:06.882973+00:00

Affected: npm: editor.md

All versions of `editor.md` are vulnerable to Cross-Site Scripting. User input is insufficiently sanitized, allowing attackers to inject malicious code in payloads containing base64-encoded content.

## Recommendation

No fix is currently available. Consider using an alternative module until a fix is made available.

 https://cve.radiocsirt.org/vuln/gsd-2019-9737 gsd-2019-9737 2026-10-18T23:49:06.883004+00:00 gsd-2019-9737