openlist-frontend vulnerabilities

Products

• @openlist-frontend/openlist-frontend 1

Latest openlist-frontend CVEs

Newest publication first

1. CVE-2025-50183 OpenList (frontend) allows XSS Attacks in the built-in Markdown Viewer

   Published 2025-06-19

   Medium·CVSS 6.5 EPSS 0.32%

   OpenList Frontend is a UI component for OpenList. Prior to version 4.0.0-rc.4, a vulnerability exists in the file preview/browsing feature of the application, where files with a .py extension that contain JavaScript code wrapped in <script> tags may be interpreted and executed as...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.