What’s Vulnerable › Products

Typora vulnerabilities

25 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Typora version is affected

Latest Typora vulnerabilities

• CVE-2026-82805 — Typora Mermaid Rendering cross site scripting (CVSS 4.3)
• CVE-2024-14010 — Typora 1.7.4 OS Command Injection via Export PDF Preferences (CVSS 9.8)
• CVE-2024-41482 — (CVSS 6.1)
• CVE-2024-41481 — (CVSS 6.1)
• CVE-2024-33300 — (CVSS 7.3)
• CVE-2024-31784 — (CVSS 6.1)
• CVE-2024-31783 — (CVSS 6.1)
• CVE-2020-18336 — (CVSS 7.4)
• CVE-2023-39703 — (CVSS 6.1)
• CVE-2023-2971 — Typora Local File Disclosure (CVSS 6.5)
• CVE-2023-2317 — Typora DOM-Based Cross-site Scripting leading to Remote Code Execution (CVSS 9.6)
• CVE-2023-2316 — Typora Local File Disclosure (CVSS 7.4)
• CVE-2020-21058 — (CVSS 6.1)
• CVE-2023-1003 — Typora WSH JScript code injection (CVSS 7.8)
• CVE-2022-40011 — (CVSS 6.1)
• CVE-2022-43668 — (CVSS 6.1)
• CVE-2020-18748 — (CVSS 6.1)
• CVE-2020-18221 — (CVSS 6.1)
• CVE-2020-18737 — (CVSS 6.1)
• CVE-2019-20374 — (CVSS 9.6)
• CVE-2019-12172 — (CVSS 7.8)
• CVE-2019-12137 — (CVSS 7.8)
• CVE-2019-7296 — (CVSS 6.1)
• CVE-2019-7295 — (CVSS 6.1)
• CVE-2019-6803 — (CVSS 6.1)