VS
Product
vscode-markdown-preview-enhanced
5
CVEs
0
On KEV
8.8
Max CVSS
5
New 30D
Severity mix
Critical 0High 3Medium 2Low 0
Watch
Add vscode-markdown-preview-enhanced to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-54701 | 6.9 | Oct 14 | Markdown Preview Enhanced: Stored XSS via Unsanitized `.crossnote/head.html` Injection in Webview Affected: < 0.8.30 |
| CVE-2026-54703 | 5.8 | Oct 14 | Markdown Preview Enhanced: Arbitrary File Write via updateMarkdown Command Without Path Validation Affected: < 0.8.30 |
Showing 2