PatchTheCVEmarktext vulnerabilities
Recent CVEs affecting marktext products. 2 tracked.
marktext has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2023-08-19. Highest priority: CVE-2023-2318 (score 51/100).
- CVE-2023-2318 HIGH 8.6 UPGRADE DOM-based XSS in src/muya/lib/contentState/pasteCtrl.js in MarkText 0.17.1 and before on Windows, Linux and ma
- CVE-2023-1004 MEDIUM 5.3 UPGRADE A vulnerability has been found in MarkText up to 0.17.1 on Windows and classified as critical
FAQ
How do I fix marktext vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is marktext being exploited right now?
None of the tracked marktext CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which marktext CVE should I patch first?
CVE-2023-2318 currently ranks highest (51/100): DOM-based XSS in src/muya/lib/contentState/pasteCtrl.js in MarkText 0.17.1 and before on Windows, Linux and ma.