Security Advisory

CVE-2026-77088

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-23 13:34:12

Last updated 2026-08-23 13:34:12

Assigner VulnCheck

CVSS score 6.1

State PUBLISHED

Description

justhtml versions 0.9.0 through 1.21.0 contain a cross-site scripting vulnerability in to_markdown() where inline code spans fail to account for blank lines as block boundaries. Attackers can inject blank lines into code or pre element text to break the inline span, causing sanitized HTML to be emitted unescaped and re-parsed as live Markdown by compliant renderers.

← Browse all CVEs View on cve.org ↗