CVE ID :CVE-2026-54566 Published : Oct. 14, 2026, 8:17 p.m. | 1 hour, 15 minutes ago Description :Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.29, Markdown Preview Enhanced evaluates repository-controlled .crossnote/config.js and...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-54566 - Markdown Preview Enhanced: Remote Code Execution via VM Sandbox Escape in `.crossnote/config.js` and `.crossnote/parser.js`

VERWANDTEARTIKEL

CVE-2026-71854 - OpenAEV has unauthenticated access and missing object-level authorization on player lessons API

CVE-2026-57489 - FileRise: AUTH_BYPASS reverse-proxy header trust without source IP validation enables full authentication bypass

CVE-2026-57490 - FileRise: WebDAV authentication bypasses TOTP/MFA entirely

CVE-2026-61843 - FileRise: Unauthenticated File Overwrite Through Upload-Enabled Folder Shares

CVE-2026-104108 - FileRise OIDC login can bind an attacker identity to an existing local account

CVE-2026-103977 - FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts