Skip to content

Product

GitHub @github/paste-markdown vulnerabilities

1 published CVE affecting GitHub @github/paste-markdown, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest GitHub @github/paste-markdown CVEs

Newest publication first

  1. CVE-2021-37700 Clipboard-based DOM-XSS

    Published
    MediumCVSS 6.1 EPSS 1.7%

    @github/paste-markdown is an npm package for pasting markdown objects. A self Cross-Site Scripting vulnerability exists in the @github/paste-markdown before version 0.3.4. If the clipboard data contains the string <table>, a div is dynamically created, and the clipboard content i...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.