What’s Vulnerable › Products

shd101wyy vscode-markdown-preview-enhanced vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your shd101wyy vscode-markdown-preview-enhanced version is affected

Latest shd101wyy vscode-markdown-preview-enhanced vulnerabilities

• CVE-2026-54703 — Markdown Preview Enhanced: Arbitrary File Write via updateMarkdown Command Without Path Validation (CVSS 5.8)
• CVE-2026-54702 — Markdown Preview Enhanced: Blind Command Dispatch via Unvalidated Webview Message Handler (CVSS 7.3)
• CVE-2026-54701 — Markdown Preview Enhanced: Stored XSS via Unsanitized `.crossnote/head.html` Injection in Webview (CVSS 6.9)
• CVE-2026-54566 — Markdown Preview Enhanced: Remote Code Execution via VM Sandbox Escape in `.crossnote/config.js` and `.crossnote/parser.js` (CVSS 8.5)
• CVE-2026-54525 — Markdown Preview Enhanced: One Click RCE via Markdown Link Command Injection on Windows (CVSS 8.8)