High severity7.6OSV Advisory· Published May 28, 2024· Updated Apr 15, 2026

CVE-2024-36109

Description

CoCalc is web-based software that enables collaboration in research, teaching, and scientific publishing. In affected versions the markdown parser allows ` tags to be included which execute when published. This issue has been addressed in commit 419862a9c9879c`. Users are advised to upgrade. There are no known workarounds for this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Sagemathinc/CocalcOSV2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)

Patches

Vulnerability mechanics

References

github.com/sagemathinc/cocalc/commit/419862a9c9879cnvd
github.com/sagemathinc/cocalc/security/advisories/GHSA-8w44-hggw-p5rfnvd

News mentions

No linked articles in our index yet.

cvss	0.494
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000