← Database

CVE-2022-42967

HIGH CVSS: 7.5 Published: 2023-01-11 Modified: 2026-06-17

Description

Caret is vulnerable to an XSS attack when the user opens a crafted Markdown file when preview mode is enabled. This directly leads to client-side code execution.

Affected Platforms

Caret Caret

Weakness Type

CWE-79, CWE-79

References