Moderate severityNVD Advisory· Published Apr 20, 2025· Updated Apr 21, 2025
CVE-2025-43954
CVE-2025-43954
Description
QMarkdown (aka quasar-ui-qmarkdown) before 2.0.5 allows XSS via headers even when when no-html is set.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
@quasar/quasar-ui-qmarkdownnpm | < 2.0.5 | 2.0.5 |
Affected products
2- Quasar/QMarkdownv5Range: 0
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.