MEDIUM6.1npm
GHSA-g2g4-47gv-p72v· CVE-2026-26028CryptPad has a Sanitizer Bypass in Diffmarked.js that Allows Arbitrary HTML Injection and Potential XSS
Modified: 6/9/2026
package
pkg:npm/cryptpad
CryptPad has a Sanitizer Bypass in Diffmarked.js that Allows Arbitrary HTML Injection and Potential XSS
Modified: 6/9/2026