CVE-2026-40201
@diplodoc/search-extension 1.0.0 through 3.x before 3.0.3 allows stored XSS via the title in a .md file.
- Update to 3.0.5
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for @diplodoc/search-extension in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerability: 1
@diplodoc/search-extension 1.0.0 through 3.x before 3.0.3 allows stored XSS via the title in a .md file.
Check your installed stack and versions against the current vulnerability feeds.