Skip to content

Product

npm post-loader vulnerabilities

1 published CVE affecting npm post-loader, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest npm post-loader CVEs

Newest publication first

  1. CVE-2022-0748 Arbitrary Code Execution

    Published
    CriticalCVSS 9.8 EPSS 2.1%

    The package post-loader from 0.0.0 are vulnerable to Arbitrary Code Execution which uses a markdown parser in an unsafe way so that any javascript code inside the markdown input files gets evaluated and executed.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.