HIGH8.3npm
GHSA-cj6r-rrr9-fg82· CVE-2025-54075Nuxt MDC has an XSS vulnerability in markdown rendering that bypasses HTML filtering
Modified: 9/10/2026
package
npm/@nuxtjs/mdc
pkg:npm/%40nuxtjs/mdc
CRITICAL9.3npm
GHSA-j82m-pc2v-2484· CVE-2025-24981Parsed HTML anchor links in Markdown provided to parseMarkdown can result in XSS in @nuxtjs/mdc
Modified: 2/13/2025
HIGH8.1npm
GHSA-mxm6-v9r6-r94c· CVE-2026-63671@nuxtjs/mdc's URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown at the default configuration
Modified: 9/16/2026