CVE-2025-43954
CVE-2025-43954
This page contains facts from public vulnerability sources. Check the original advisory before updating.
QMarkdown (aka quasar-ui-qmarkdown) before 2.0.5 allows XSS via headers even when when no-html is set.
CVSS 4.9 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Stack: node
Affected products and versions
qmarkdown
- Versions
- ≥ 0, < 2.0.5: Affected (semver)
Update to 2.0.5
@quasar/quasar-ui-qmarkdown npm
- Affected ranges
- SEMVER: < 2.0.5
Update to 2.0.5