Medium severity4.9NVD Advisory· Published Apr 20, 2025· Updated Jun 17, 2026
CVE-2025-43954
CVE-2025-43954
Description
QMarkdown (aka quasar-ui-qmarkdown) before 2.0.5 allows XSS via headers even when when no-html is set.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
@quasar/quasar-ui-qmarkdownnpm | < 2.0.5 | 2.0.5 |
Affected products
3Patches
Vulnerability mechanics
References
4- github.com/quasarframework/quasar-ui-qmarkdown/commit/b61dff84851c45369cf931db5bd93db177c657f6nvdPatchWEB
- github.com/quasarframework/quasar-ui-qmarkdown/compare/v2.0.4...v2.0.5nvdPatchRelease NotesWEB
- github.com/advisories/GHSA-wm65-ph3w-587cghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2025-43954ghsaADVISORY
News mentions
0No linked articles in our index yet.