Codimd (Hackmdio) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-07-10. Vendor: Hackmdio.

CVEs of Codimd

• CVE-2024-38354 - CVSS 8.1 (high), 2024-07-10: CodiMD allows realtime collaborative markdown notes on all platforms. The notebook feature of Hackmd.io permits the rendering of iframe `HTML` tags with an…
• CVE-2024-38353 - CVSS 5.3 (medium), 2024-07-10: CodiMD allows realtime collaborative markdown notes on all platforms. CodiMD before 2.5.4 is missing authentication and access control vulnerability allowing…