masscode vulnerabilities

Latest masscode CVEs

Newest publication first

1. CVE-2026-114574 massCodeIO massCode Local HTTP Service index.ts information disclosure

   Published 2026-10-21

   Medium·CVSS 5.3 EPSS 0.31%

   A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The expl...

2. CVE-2020-8548 massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferences is true).

   Published 2020-02-03

   Medium·CVSS 6.1 EPSS 1.4%

   massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferences is true).

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.