npm package
@quasar/quasar-ui-qmarkdown
pkg:npm/%40quasar/quasar-ui-qmarkdown
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-43954 | Med | 4.9 | < 2.0.5 | 2.0.5 | Apr 20, 2025 | QMarkdown (aka quasar-ui-qmarkdown) before 2.0.5 allows XSS via headers even when when no-html is set. |
- affected < 2.0.5fixed 2.0.5
QMarkdown (aka quasar-ui-qmarkdown) before 2.0.5 allows XSS via headers even when when no-html is set.