commenthol vulnerabilities

Products

• md-fileserver 1
• versionn 1

Latest commenthol CVEs

Newest publication first

1. CVE-2026-46492 md-fileserver: Stored/Reflected XSS when viewing Markdown (raw HTML allowed)

   Published 2026-06-09

   High·CVSS 7.2

   md-fileserver allows for local viewing of markdown files in a browser. Prior to version 1.10.3, a cross-site scripting (XSS) vulnerability exists in the application’s Markdown rendering logic. When user-supplied Markdown content is rendered, embedded raw HTML—including <script> t...

2. CVE-2023-25805 versionn Command Injection Vulnerability

   Published 2023-02-20

   Critical·CVSS 9.8

   versionn, software for changing version information across multiple files, has a command injection vulnerability in all versions prior to version 1.1.0. This issue is patched in version 1.1.0.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.