cocalc vulnerabilities

1 known vulnerability in cocalc from Sagemathinc. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.6 High severity

  cocalc: Improper Neutralization of Input During Web Page Generation

  CVE-2024-36109May 28, 2024Sagemathinc

  CoCalc is web-based software that enables collaboration in research, teaching, and scientific publishing. In affected versions the markdown parser allows `<script>` tags to be included which execute when published. This issue has been addressed in commit `4198