mdc vulnerabilities

2 known vulnerabilities in mdc from Nuxt-modules. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  mdc: Improper Neutralization of Input During Web Page Generation

  CVE-2025-54075Jul 18, 2025Nuxt-modules

  MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. Prior to version 0.17.2, a remote script-inclusion / stored cross-site scripting vulnerability in @nuxtjs/mdc lets a Markdown author inject a `<base href="https

• 9.3 Critical severity

  mdc: Improper Neutralization of Input During Web Page Generation

  CVE-2025-24981Feb 6, 2025Nuxt-modules

  MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. In affected versions unsafe parsing logic of the URL from markdown can lead to arbitrary JavaScript code due to a bypass to the existing guards around the `java