mdc vulnerable to XSS in markdown rendering bypassing HTML filter. (N°4)

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2025-54075 · CVE overview and exploitation status

EUVD-2025-21892

GHSA-cj6r-rrr9-fg82

cve-program · CVE-2025-54075

• https://github.com/nuxt-modules/mdc/security/advisories/GHSA-cj6r-rrr9-fg82
• https://github.com/nuxt-modules/mdc/commit/3657a5bf2326a73cd3d906f57149146a412b962a

euvd · EUVD-2025-21892

• https://github.com/nuxt-modules/mdc/security/advisories/GHSA-cj6r-rrr9-fg82
• https://github.com/nuxt-modules/mdc/commit/3657a5bf2326a73cd3d906f57149146a412b962a

nvd · CVE-2025-54075

• https://github.com/nuxt-modules/mdc/commit/3657a5bf2326a73cd3d906f57149146a412b962a
• https://github.com/nuxt-modules/mdc/security/advisories/GHSA-cj6r-rrr9-fg82

osv · GHSA-cj6r-rrr9-fg82

• https://github.com/nuxt-modules/mdc/security/advisories/GHSA-cj6r-rrr9-fg82
• https://nvd.nist.gov/vuln/detail/CVE-2025-54075
• https://github.com/nuxt-modules/mdc/commit/3657a5bf2326a73cd3d906f57149146a412b962a
• https://github.com/nuxt-modules/mdc

No related changes are available here.