Description
Shiba markdown live preview app version 1.1.0 is vulnerable to XSS which leads to code execution due to enabled node integration.
Remediation
References
https://github.com/rhysd/Shiba/commit/e8a65b0f81eb04903eedd29500d7e1bedf249eab
https://github.com/rhysd/Shiba/issues/42
Related Vulnerabilities
CVE-2023-40014 Vulnerability in maven package org.webjars.npm:openzeppelin__contracts-upgradeable
CVE-2020-36604 Vulnerability in npm package @hapi/hoek
CVE-2022-23539 Vulnerability in npm package jsonwebtoken
CVE-2023-29566 Vulnerability in npm package dawnsparks-node-tesseract
CVE-2020-36048 Vulnerability in maven package org.webjars.bower:engine.io