{"id":"EUVD-2026-26484","enisaUuid":"c4a2c33d-a364-352a-8341-d40c32975b5d","description":"@diplodoc/search-extension 1.0.0 through 3.x before 3.0.3 allows stored XSS via the title in a .md file.","datePublished":"May 1, 2026, 8:36:39 AM","dateUpdated":"May 5, 2026, 1:36:22 AM","baseScore":5.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","references":"https://github.com/diplodoc-platform/search-extension/releases\nhttps://github.com/diplodoc-platform/search-extension/pull/41\nhttps://github.com/diplodoc-platform/search-extension/releases/tag/v3.0.3\nhttps://github.com/eyelessgoddd/eyelessgoddd/blob/main/README.md\n","aliases":"CVE-2026-40201\n","assigner":"mitre","epss":0.24,"enisaIdProduct":[{"id":"2921471c-84fd-3ac3-a069-a05978793542","product":{"name":"@diplodoc/search-extension","vendor":{"name":"diplodoc-platform"}},"product_version":"1.0.0 \u003c3.0.3"}],"enisaIdVendor":[{"id":"b66e2332-7638-3cde-96b1-b2e605064b11","vendor":{"name":"diplodoc-platform"}}],"enisaIdVulnerability":[{"id":"1c5e8fcc-a117-34cc-b873-3ba23ebfcf61","vulnerability":{"id":"CVE-2026-40201","description":"@diplodoc/search-extension 1.0.0 through 3.x before 3.0.3 allows stored XSS via the title in a .md file.","datePublished":"May 1, 2026, 8:36:39 AM","dateUpdated":"May 5, 2026, 1:36:22 AM","status":"PUBLISHED","baseScore":5.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","references":"https://github.com/diplodoc-platform/search-extension/releases\nhttps://github.com/diplodoc-platform/search-extension/pull/41\nhttps://github.com/diplodoc-platform/search-extension/releases/tag/v3.0.3\nhttps://github.com/eyelessgoddd/eyelessgoddd/blob/main/README.md\n","enisa_id":"EUVD-2026-26484\n","assigner":"mitre","epss":0.24,"dataProcessed":"Oct 27, 2026, 7:16:42 AM","vulnerabilityProduct":[{"id":"296abf89-c35b-369f-8f04-dce9dea7aa91","product":{"name":"@diplodoc/search-extension","vendor":{"name":"diplodoc-platform"}},"product_version":"1.0.0 \u003c3.0.3"}],"vulnerabilityVendor":[{"id":"638b9e02-5c7c-3b47-bf5e-2ddcde94135a","vendor":{"name":"diplodoc-platform"}}]}},{"id":"4efbeea2-40f8-33d6-ae44-e7c353441e71","vulnerability":{"id":"GHSA-rjmp-rwj4-mv82","description":"@diplodoc/search-extension allows stored XSS via Markdown file title","datePublished":"May 1, 2026, 9:30:25 AM","dateUpdated":"May 7, 2026, 2:44:09 AM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-40201\nhttps://github.com/diplodoc-platform/search-extension/pull/41\nhttps://github.com/diplodoc-platform/search-extension\nhttps://github.com/diplodoc-platform/search-extension/releases\nhttps://github.com/diplodoc-platform/search-extension/releases/tag/v3.0.3\nhttps://github.com/eyelessgoddd/eyelessgoddd/blob/main/README.md\n","enisa_id":"EUVD-2026-26484\n","aliases":"GHSA-rjmp-rwj4-mv82\nCVE-2026-40201\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:55:50 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}