Advisories · Technology

Typora.

Every CVE that names Typora among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-82805 CVE record

CVSS 5.3 Medium

Typora Mermaid Rendering cross site scripting
- Typora
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 31 Aug 2026
CVE-2024-14010 CVE record

CVSS 8.5 High

Typora 1.7.4 OS Command Injection via Export PDF Preferences
- Typora
- Command injection
Not analysed yet 12 Dec 2025
CVE-2023-2971 CVE record

CVSS 6.3 Medium

Typora Local File Disclosure
- Typora
- Path traversal
Not analysed yet 19 Aug 2023
CVE-2023-2317 CVE record

CVSS 8.6 High

Typora DOM-Based Cross-site Scripting leading to Remote Code Execution
- Typora
- Cross-site scripting (XSS)
Not analysed yet 19 Aug 2023
CVE-2023-2316 CVE record

CVSS 7.4 High

Typora Local File Disclosure
- Typora
- Path traversal
Not analysed yet 19 Aug 2023
CVE-2023-1003 CVE record

CVSS 5.3 Medium

Typora WSH JScript code injection
- Typora
- Code injection
Not analysed yet 24 Feb 2023
CVE-2022-43668 CVE record

CVSS 6.1 Medium

Cross-site scripting in Typora
- Typora
- Cross-site scripting (XSS)
Not analysed yet 7 Dec 2022