Repository navigation
Security: commenthol/md-fileserver
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
md-fileserver stored XSS via unvalidated highlight config written through unescaped lodash templateGHSA-rwv8-c737-pgg8 published
Oct 24, 2026 by commentholHigh -
Stored/Reflected XSS when viewing Markdown (raw HTML allowed)GHSA-32q2-hhr5-6qvv published
May 14, 2026 by commentholHigh
Learn more about advisories related to commenthol/md-fileserver in the GitHub Advisory Database