npm/@openlist-frontend/openlist-frontend CVE-2025-50183: medium 6.5, EPSS 0.32%
OpenList (frontend) allows XSS Attacks in the built-in Markdown Viewer
Action: Upgrade @openlist-frontend/openlist-frontend to 4.0.0-rc.4 or later.
npm i @openlist-frontend/openlist-frontend@4.0.0-rc.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.0-rc.4 | - |
Fixed versions
| 4.0.0-rc.4 |
Sources
- osv: GHSA-2hw3-h8qx-hqqp
- https://github.com/OpenListTeam/OpenList/security/advisories/GHSA-2hw3-h8qx-hqqp
- https://nvd.nist.gov/vuln/detail/CVE-2025-50183
- https://github.com/OpenListTeam/OpenList-Frontend/commit/7b5ed20c608c7b9b36d1950a386678e0a89f8175
- https://github.com/OpenListTeam/OpenList
CVE-2025-50183 · published · modified · JSON