p PatchFirst

PatchFirst · Latest vulnerabilities

@openlist-frontend/openlist-frontend vulnerabilities

Vulnerabilities published for @openlist-frontend/openlist-frontend in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2025-50183

    Medium · CVSS 6.5EPSS 0.32%Fix available

    OpenList (frontend) allows XSS Attacks in the built-in Markdown Viewer

    OpenList Frontend is a UI component for OpenList. Prior to version 4.0.0-rc.4, a vulnerability exists in the file preview/browsing feature of the application, where files with a .py extension that contain JavaScript code wrapped in <script> tags may be interpreted and executed as HTML in certain modes. This leads to a stored XSS vulnerability. This issue has been patched in version 4.0.0-rc.4.

    @openlist-frontend/openlist-frontendNode.js
    • Update to 4.0.0-rc.4
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →