{"action":"Upgrade @nuxtjs/mdc to 0.17.2 or later.","affected":[{"fixed":"0.17.2","introduced":"0"}],"component":"@nuxtjs/mdc","cve_ids":["CVE-2025-54075"],"ecosystem":"npm","epss":0.00344,"exploited":false,"fixed_versions":["0.17.2"],"ghsa_id":"GHSA-cj6r-rrr9-fg82","id":"tcs_01M5KFJYW480FWZYGYZH2KEGJG","modified_at":"2026-09-10T03:50:57.907996530Z","published_at":"2025-07-20T16:36:14Z","references":["https://osv.dev/vulnerability/GHSA-cj6r-rrr9-fg82","https://github.com/nuxt-modules/mdc/security/advisories/GHSA-cj6r-rrr9-fg82","https://nvd.nist.gov/vuln/detail/CVE-2025-54075","https://github.com/nuxt-modules/mdc/commit/3657a5bf2326a73cd3d906f57149146a412b962a","https://github.com/nuxt-modules/mdc"],"severity":{"label":"high","score":8.3},"sources":[{"source":"osv","source_id":"GHSA-cj6r-rrr9-fg82","url":"https://osv.dev/vulnerability/GHSA-cj6r-rrr9-fg82"}],"summary":"Nuxt MDC has an XSS vulnerability in markdown rendering that bypasses HTML filtering"}